farai 0.1.5 → 0.1.6

package/dist/cli/index.js

@@ -3635,7 +3635,7 @@ function proxyConfig(value) {
 }
 function resolveProxyConfig(config) {
   return {
-    transparent: config.proxy?.transparent !== false,
+    transparent: config.proxy?.transparent === true,
     ports: config.proxy?.ports?.length ? config.proxy.ports : DEFAULT_TRANSPARENT_PROXY_PORTS
   };
 }
@@ -3958,10 +3958,9 @@ function atomicWriteFile(path, content, mode) {
   }
 }
 var DEFAULT_TRANSPARENT_PROXY_PORTS, LSP_SERVER_IDS, DEFAULT_CONFIG_TEMPLATE = `model = "big-pickle"
-max_turn_seconds = 900
 
 [proxy]
-transparent = true
+transparent = false
 
 [mcp_servers.mitmproxy-mcp]
 command = "mitmproxy-mcp"
@@ -5018,14 +5017,45 @@ function sanitizeToolOutput(value) {
   if (http && isBinaryLike(http.body)) {
     return `${sanitizeText(http.head).trimEnd()}
 
-[binary body suppressed: ${byteLength(http.body)} bytes]`;
+${binaryPreview(http.body, "binary body")}`;
   }
   if (isBinaryLike(value)) {
-    return `[binary output suppressed: ${byteLength(value)} bytes]
-Use a file-oriented command such as file, unzip -l, strings, or hexdump -C to inspect it.`;
+    return binaryPreview(value, "binary-like output");
   }
   return sanitizeText(value);
 }
+function binaryPreview(value, label) {
+  const bytes = Buffer.from(value, "utf8");
+  const strings = printableStrings(bytes).slice(0, 24);
+  const hex = [...bytes.subarray(0, 192)].map((byte) => byte.toString(16).padStart(2, "0")).reduce((lines, byte, index) => {
+    const line = Math.floor(index / 16);
+    lines[line] = `${lines[line] ?? ""}${lines[line] ? " " : ""}${byte}`;
+    return lines;
+  }, []);
+  return [`[${label}: ${bytes.byteLength} bytes; showing readable strings and a hex preview]`, ...strings.length ? [strings.join(`
+`)] : [], ...hex.length ? [hex.join(`
+`)] : []].join(`
+`);
+}
+function printableStrings(bytes) {
+  const result = [];
+  let current = "";
+  const flush = () => {
+    if (current.length >= 4)
+      result.push(current);
+    current = "";
+  };
+  for (const byte of bytes) {
+    if (byte === 9 || byte === 32 || byte >= 33 && byte <= 126)
+      current += String.fromCharCode(byte);
+    else if (byte === 10 || byte === 13)
+      flush();
+    else
+      flush();
+  }
+  flush();
+  return result;
+}
 function isBinaryLike(value) {
   if (!value)
     return false;
@@ -5093,9 +5123,6 @@ function consumeStringEscape(value, start, bellTerminates) {
   }
   return index;
 }
-function byteLength(value) {
-  return Buffer.byteLength(value, "utf8");
-}
 function splitHttpResponse(value) {
   if (!value.startsWith("HTTP/"))
     return;
@@ -6195,14 +6222,10 @@ function containerRelativePath(path) {
     return ".";
   return resolved.startsWith(prefix) ? resolved.slice(prefix.length) : resolved;
 }
-function assertNotProtectedPath(path, intent) {
+function assertNotProtectedPath(path, _intent) {
   const rel = containerRelativePath(path);
-  if (rel === ".git" || rel.startsWith(".git/"))
-    throw new Error("path is protected: .git");
   if (rel === ".farai" || rel.startsWith(".farai/"))
     throw new Error("path is protected: .farai");
-  if (intent === "write" && rel === ".gitignore")
-    throw new Error("path is protected: .gitignore");
 }
 function shQuote2(value) {
   return `'${value.replace(/'/g, `'\\''`)}'`;
@@ -6274,7 +6297,7 @@ async function containerListFilesRecursive(context, path, limit) {
 import os
 root = ${JSON.stringify(root)}
 limit = ${Math.max(1, Math.floor(limit))}
-exclude = {".git", ".farai", "node_modules"}
+exclude = {".farai", "node_modules"}
 out = []
 for dirpath, dirnames, filenames in os.walk(root):
     dirnames[:] = sorted(d for d in dirnames if d not in exclude)
@@ -6300,7 +6323,7 @@ root = ${JSON.stringify(root)}
 pattern = re.compile(base64.b64decode(${JSON.stringify(Buffer.from(pattern, "utf8").toString("base64"))}).decode())
 include = ${include === undefined ? "None" : JSON.stringify(include)}
 limit = ${Math.max(1, Math.floor(limit))}
-exclude = {".git", ".farai", "node_modules"}
+exclude = {".farai", "node_modules"}
 matches = []
 for dirpath, dirnames, filenames in os.walk(root):
     dirnames[:] = sorted(d for d in dirnames if d not in exclude)
@@ -6432,12 +6455,8 @@ function safeWorkspacePath(workspace, path, intent) {
     return resolved;
   }
   const normalized = rel.split(/[\\/]+/).join("/");
-  if (normalized === ".git" || normalized.startsWith(".git/"))
-    throw new Error("path is protected: .git");
   if (normalized === ".farai" || normalized.startsWith(".farai/"))
     throw new Error("path is protected: .farai");
-  if (intent === "write" && normalized === ".gitignore")
-    throw new Error("path is protected: .gitignore");
   return resolved;
 }
 function safeExistingWorkspacePath(workspace, path, intent) {
@@ -6448,12 +6467,8 @@ function safeExistingWorkspacePath(workspace, path, intent) {
   if (rel.startsWith("..") || rel === "")
     throw new Error(`path escapes workspace${path.startsWith("/") ? ESCAPE_HINT : ""}`);
   const normalized = rel.split(/[\\/]+/).join("/");
-  if (normalized === ".git" || normalized.startsWith(".git/"))
-    throw new Error("path is protected: .git");
   if (normalized === ".farai" || normalized.startsWith(".farai/"))
     throw new Error("path is protected: .farai");
-  if (intent === "write" && normalized === ".gitignore")
-    throw new Error("path is protected: .gitignore");
   return resolved;
 }
 function page(items, offset, limit) {
@@ -10901,7 +10916,7 @@ function scopedToolName(name) {
   return TOOL_SCOPE_ALIASES.get(canonical) ?? canonical;
 }
 function resolveSubagentToolScope(input) {
-  const available = new Set(input.availableTools.map((tool) => canonicalToolName(tool.name)).filter((name) => !NON_DELEGABLE_TOOLS.has(name)));
+  const available = new Set(input.availableTools.map((tool) => canonicalToolName(tool.name)));
   const requested = input.requestedTools?.map(scopedToolName);
   if (requested) {
     const unique = [...new Set(requested)];
@@ -10925,14 +10940,13 @@ function hasSharedWorkspaceEdits(tools) {
   return tools.map(canonicalToolName).some((tool) => SHARED_WORKSPACE_EDIT_TOOLS.has(tool));
 }
 function buildSubagentTaskPrompt(input) {
-  return ["you are a leaf subagent working for a parent farai session.", `parent session: ${input.parentSessionId}`, `task: ${input.title}`, ...input.lane ? [`lane: ${input.lane}`] : [], ...input.tools?.length ? [`tool scope: ${input.tools.join(", ")}`] : [], "work autonomously only on this bounded task. do not delegate again, ask the user questions, repeat parent work, broaden scope, or write a user-facing answer.", "preserve exact evidence and return one concise result with status, summary, claims, artifacts, changes, coverage, uncertainty, next actions, and metrics. distinguish proven, candidate, disproven, and inconclusive claims. the parent owns synthesis and the final answer.", ...input.lanePrompt ? [input.lanePrompt] : [], input.task].join(`
+  return ["you are a subagent working for a parent farai session.", `parent session: ${input.parentSessionId}`, `task: ${input.title}`, ...input.lane ? [`lane: ${input.lane}`] : [], ...input.tools?.length ? [`tool scope: ${input.tools.join(", ")}`] : [], "work autonomously on the delegated task. you may delegate concrete independent subtasks when useful. avoid repeating parent work or broadening the task without evidence.", "preserve exact evidence and return one concise result with status, summary, claims, artifacts, changes, coverage, uncertainty, next actions, and metrics. distinguish proven, candidate, disproven, and inconclusive claims. the parent owns synthesis and the final answer.", ...input.lanePrompt ? [input.lanePrompt] : [], input.task].join(`
 
 `);
 }
-var NON_DELEGABLE_TOOLS, SHARED_WORKSPACE_EDIT_TOOLS, TOOL_SCOPE_ALIASES;
+var SHARED_WORKSPACE_EDIT_TOOLS, TOOL_SCOPE_ALIASES;
 var init_scope = __esm(() => {
   init_tool_names();
-  NON_DELEGABLE_TOOLS = new Set(["tool_search", "tool_invoke", "request_user_input", "agent_spawn", "agent_list", "agent_wait", "agent_message", "agent_followup", "agent_interrupt", "agent_close", "campaign_dispatch"]);
   SHARED_WORKSPACE_EDIT_TOOLS = new Set(["fs_write", "fs_edit", "patch_apply", "code_write_script"]);
   TOOL_SCOPE_ALIASES = new Map([["shell", "shell_exec"]]);
 });
@@ -10948,7 +10962,7 @@ var init_dispatch = __esm(() => {
   init_renderers();
   campaignDispatchTool = {
     name: "campaign_dispatch",
-    description: "dispatch up to three bounded child workers with non-overlapping ownership claims. workers return evidence and candidate hypotheses, never confirmed findings. set background=true only when the parent can continue independently.",
+    description: "dispatch child workers with non-overlapping ownership claims. workers return evidence and candidate hypotheses, never confirmed findings. set background=true only when the parent can continue independently.",
     inputSchema: {
       type: "object",
       required: ["tasks"],
@@ -10962,7 +10976,6 @@ var init_dispatch = __esm(() => {
         tasks: {
           type: "array",
           minItems: 1,
-          maxItems: 3,
           items: {
             type: "object",
             required: ["title", "prompt"],
@@ -10992,7 +11005,7 @@ var init_dispatch = __esm(() => {
       }
     },
     mutates: true,
-    timeoutMs: 120000,
+    timeoutMs: Number.POSITIVE_INFINITY,
     parallel: false,
     concurrencyScope: "session",
     renderHuman: defaultHumanRenderer,
@@ -11005,8 +11018,6 @@ var init_dispatch = __esm(() => {
         throw new Error("delegation is unavailable in this runtime");
       if (!Array.isArray(args.tasks) || args.tasks.length === 0)
         throw new Error("tasks must contain at least one worker task");
-      if (args.tasks.length > 3)
-        throw new Error("tasks cannot contain more than three worker tasks");
       const background = args.background === true;
       const tasks = args.tasks.map((task) => {
         if (!task || typeof task !== "object")
@@ -11030,8 +11041,6 @@ var init_dispatch = __esm(() => {
         throw new Error("task title and prompt must be non-empty");
       if (tasks.length > 1 && tasks.some((task) => !task.claim))
         throw new Error("each parallel campaign worker requires an exclusive claim");
-      if (background && tasks.some((task) => !task.lane))
-        throw new Error("background campaign workers require an explicit lane");
       const claims = tasks.flatMap((task) => task.claim ? [normalizeClaim(task.claim)] : []);
       if (new Set(claims).size !== claims.length)
         throw new Error("parallel campaign worker claims must be unique");
@@ -11041,15 +11050,13 @@ var init_dispatch = __esm(() => {
           const lane = task.lane ? resolveLane(context.rootWorkspace ?? context.workspace, task.lane) : undefined;
           if (task.lane && !lane)
             throw new Error(`unknown subagent lane: ${task.lane}`);
-          const scope = resolveSubagentToolScope({
+          resolveSubagentToolScope({
             parent: context.session,
             availableTools,
             ...lane?.tools ? {
               requestedTools: lane.tools
             } : {}
           });
-          if (background && hasSharedWorkspaceEdits(scope))
-            throw new Error(`background campaign worker ${task.title} requires a non-editing lane`);
         }
       }
       const results = await Promise.all(tasks.map(async (task) => {
@@ -13034,7 +13041,13 @@ function refreshSignature(input, configs) {
   });
 }
 function resolveMcpPort(configs, portOffset = 0) {
-  return DEFAULT_MITMPROXY_PORT;
+  const configured = configs.find((config) => config.mitmproxy)?.mitmproxy?.port;
+  const base = Number.isInteger(configured) ? configured : DEFAULT_MITMPROXY_PORT;
+  const offset = Number.isFinite(portOffset) ? Math.trunc(portOffset) : 0;
+  const port = base + offset;
+  if (port < 1 || port > 65535)
+    throw new Error(`resolved MCP proxy port is outside 1-65535: ${port}`);
+  return port;
 }
 function applyMcpPortTemplate(config, port) {
   const replacePort = (value) => value.replaceAll("${PORT}", String(port)).replaceAll("${PROXY_PORT}", String(port)).replaceAll("{PORT}", String(port)).replaceAll("{PROXY_PORT}", String(port));
@@ -14626,20 +14639,18 @@ function parseDelegation(args, context, resumeSessionId) {
     throw new Error("prompt must be a non-empty string");
   const mode = args.mode === "detached" ? "detached" : "attached";
   const lane = maybeString(args.lane);
+  const model = maybeString(args.model);
   const tools = Array.isArray(args.tools) ? [...new Set(args.tools.map((item) => asString(item, "tools[]").trim()).filter(Boolean))] : undefined;
   if (Array.isArray(args.tools) && !tools?.length)
     throw new Error("tools must contain at least one non-empty tool name");
-  if (resumeSessionId && (lane || tools))
-    throw new Error("resumed subagents preserve their original lane and tool scope");
-  if (mode === "detached" && !resumeSessionId && !lane && !tools?.length)
-    throw new Error("detached subagents require an explicit lane or tool scope");
   const title = normalizeSessionTitle(maybeString(args.title) ?? (resumeSessionId ? childTitle(context, resumeSessionId) : titleFromPrompt(prompt, lane ? `${lane} task` : "subagent task")));
   return {
     title,
     prompt,
     mode,
     lane,
-    tools
+    tools,
+    model
   };
 }
 async function delegate(args, context, resumeSessionId) {
@@ -14656,6 +14667,9 @@ async function delegate(args, context, resumeSessionId) {
     } : {},
     ...input.tools?.length ? {
       tools: input.tools
+    } : {},
+    ...input.model ? {
+      model: input.model
     } : {}
   });
   return {
@@ -14704,7 +14718,7 @@ function followupTool() {
       additionalProperties: false
     },
     mutates: true,
-    timeoutMs: 900000,
+    timeoutMs: Number.POSITIVE_INFINITY,
     parallel: true,
     concurrencyScope: "session",
     renderHuman: agentResultRenderer,
@@ -14737,6 +14751,10 @@ var init_lifecycle = __esm(() => {
       },
       description: "optional restriction that cannot exceed the parent scope"
     },
+    model: {
+      type: "string",
+      description: "optional model override"
+    },
     mode: {
       type: "string",
       enum: ["attached", "detached"]
@@ -14744,7 +14762,7 @@ var init_lifecycle = __esm(() => {
   };
   agentSpawnTool = {
     name: "agent_spawn",
-    description: "Start a bounded leaf subagent. Attached waits; detached runs independently and requires a lane or tool scope.",
+    description: "Start a subagent. Attached waits for its result; detached lets it continue independently in the background.",
     inputSchema: {
       type: "object",
       required: ["prompt"],
@@ -14752,7 +14770,7 @@ var init_lifecycle = __esm(() => {
       additionalProperties: false
     },
     mutates: true,
-    timeoutMs: 900000,
+    timeoutMs: Number.POSITIVE_INFINITY,
     parallel: true,
     concurrencyScope: "session",
     renderHuman: agentResultRenderer,
@@ -15643,7 +15661,7 @@ var init_request_user_input = __esm(() => {
     },
     mutates: false,
     timeoutMs: 86400000,
-    parallel: false,
+    parallel: true,
     concurrencyScope: "session",
     renderHuman: (result) => result.output ?? result.summary,
     renderModel: (result) => result.output ?? result.summary,
@@ -17366,9 +17384,10 @@ function renderCtfNotes(input) {
 }
 
 // src/agent-core/default-model.ts
-var DEFAULT_MODEL_PROVIDER_ID = "opencode", DEFAULT_MODEL_BASE_URL = "https://opencode.ai/zen/v1", DEFAULT_MODEL_ID = "big-pickle", DEFAULT_MODEL_PUBLIC_API_KEY = "public", DEFAULT_CONTEXT_WINDOW = 32000, DEFAULT_MAX_OUTPUT_TOKENS = 4096, DEFAULT_MAX_STEPS = 120, DEFAULT_MAX_TURN_SECONDS;
+var DEFAULT_MODEL_PROVIDER_ID = "opencode", DEFAULT_MODEL_BASE_URL = "https://opencode.ai/zen/v1", DEFAULT_MODEL_ID = "big-pickle", DEFAULT_MODEL_PUBLIC_API_KEY = "public", DEFAULT_CONTEXT_WINDOW = 32000, DEFAULT_MAX_OUTPUT_TOKENS = 4096, DEFAULT_MAX_STEPS, DEFAULT_MAX_TURN_SECONDS;
 var init_default_model = __esm(() => {
-  DEFAULT_MAX_TURN_SECONDS = 15 * 60;
+  DEFAULT_MAX_STEPS = Number.POSITIVE_INFINITY;
+  DEFAULT_MAX_TURN_SECONDS = Number.POSITIVE_INFINITY;
 });
 
 // src/agent-core/model-registry.ts
@@ -19931,11 +19950,6 @@ function activeBackgroundJobs(calls) {
   }
   return jobs;
 }
-function findEquivalentBackgroundJob(jobs, tool, args) {
-  const fingerprint = stableValue(args);
-  const canonical = canonicalToolName(tool);
-  return jobs.find((job) => job.tool === canonical && stableValue(job.args) === fingerprint);
-}
 function processIdFromArgs(args) {
   if (!args || typeof args !== "object" || Array.isArray(args))
     return;
@@ -21476,188 +21490,21 @@ var init_history_projection = __esm(() => {
 });
 
 // src/agent-core/capability-admission.ts
-function matches(text, pattern) {
-  return pattern.test(text.toLowerCase());
-}
-function exactToolMention(text, name) {
-  return canonicalToolName(text.toLowerCase()).includes(name.toLowerCase());
-}
-function containsNetworkTarget(text) {
-  return /https?:\/\/|\b(?:www\.)?(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+(?:[a-z]{2,63}|xn--[a-z0-9-]{2,59})(?::\d{1,5})?\b|\b\d{1,3}(?:\.\d{1,3}){3}(?::\d{1,5})?\b/i.test(text);
-}
-function containsHostnameTarget(text) {
-  return /\b(?:www\.)?(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+(?:[a-z]{2,63}|xn--[a-z0-9-]{2,59})(?::\d{1,5})?\b/i.test(text);
-}
-function hasAssessmentIntent(text) {
-  return matches(text, /\b(audit|assess(?:ment)?|security[ -]?(?:audit|test(?:ing)?)|pentest|scan|target|host|ctf|vulnerability|vuln|exploit|enumerat(?:e|ion)|recon|uji keamanan|cek keamanan|periksa keamanan)\b/);
-}
-function isInteractiveWebTask(session, userText = "") {
-  const text = userText.toLowerCase();
-  const assessmentPhase = ["recon", "enumeration", "hypothesis", "verification", "exploit_lab", "post_exploit_lab"].includes(session.phase);
-  const hostnameTarget = containsHostnameTarget(text);
-  const networkTarget = containsNetworkTarget(text);
-  const explicitWebTarget = /https?:\/\//i.test(text);
-  const explicitHttpService = networkTarget && matches(text, /\bhttps?\b/);
-  const browserOperation = matches(text, /\b(web(?:site|app)?|site|browser|playwright|camoufox|page|halaman|situs|login|sign[ -]?in|form|dashboard|cookie|redirect|javascript|dom|frontend|endpoint|api)\b/);
-  const interactiveOperation = explicitWebTarget || explicitHttpService || browserOperation;
-  const interactiveWebIntent = explicitWebTarget || interactiveOperation;
-  const passiveInfrastructure = isPassiveInfrastructureTask(text) && !browserOperation;
-  const assessmentIntent = hasAssessmentIntent(text) && (hostnameTarget || networkTarget && interactiveWebIntent) && !passiveInfrastructure;
-  const codingOnly = matches(text, /\b(code|coding|implement|refactor|bug|fix|unit test|typecheck|repository|repo|parser)\b|\.(ts|tsx|js|jsx|py|go|rs)\b/) && !matches(text, /https?:\/\/|\b(browser|playwright|camoufox|page|login|form|dashboard|cookie|redirect|javascript|dom|frontend)\b/);
-  return !passiveInfrastructure && !codingOnly && (assessmentIntent || interactiveWebIntent || assessmentPhase && interactiveWebIntent);
-}
-function isPassiveInfrastructureTask(userText = "") {
-  return matches(userText, /\b(subdomains?|passive[ -]?dns|certificate transparency|\bct logs?\b|crt\.sh|asset[ -]?(?:discovery|enumeration)|dns[ -]?(?:recon|enumeration)|enumerat(?:e|ion)\s+(?:dns|subdomains?))\b/);
-}
-function isExplicitRawHttpTask(userText = "") {
-  const text = userText.toLowerCase();
-  const negatedClient = /\b(?:do not|don't|never|avoid|jangan|tanpa)\b[^\n]{0,48}\b(?:http_request|curl|wget|httpie|xh)\b/.test(text);
-  if (!negatedClient && /\b(?:http_request|curl|wget|httpie|xh)\b/.test(text))
-    return true;
-  if (/\b(?:raw http|wire format|request smuggling|response splitting|http\/1\.[01]|http\/2|http\/3|exact protocol|protocol verification)\b/.test(text))
-    return true;
-  if (/\b(?:ffuf|fuzz(?:er|ing)?|wordlist|brute[ -]?force|load test|benchmark)\b/.test(text))
-    return true;
-  return /\b(?:script|scripting|automate|repeatable|regression|integration test|api test|testing)\b/.test(text) && /\b(?:http|https|api|request|response|endpoint)\b/.test(text);
-}
-function browserKernelOperation(name) {
-  return BROWSER_KERNEL.find((operation) => name === operation || name.endsWith(`_${operation}`));
-}
-function selectBrowserKernel(tools) {
-  const selected = [];
-  for (const operation of BROWSER_KERNEL) {
-    const candidates = tools.filter((tool) => browserKernelOperation(tool.name) === operation).sort((left, right) => Number(right.name === operation) - Number(left.name === operation) || left.name.localeCompare(right.name));
-    if (candidates[0])
-      selected.push(candidates[0]);
-  }
-  return selected;
-}
 function selectCapabilities(input) {
   if (input.session.toolScope?.length) {
     const scope = new Set(input.session.toolScope.map(canonicalToolName));
-    const direct2 = input.tools.filter((tool) => scope.has(tool.name)).sort((a, b) => a.name.localeCompare(b.name));
+    const direct2 = input.tools.filter((tool) => scope.has(canonicalToolName(tool.name))).sort((a, b) => a.name.localeCompare(b.name));
     return {
       direct: direct2,
       deferred: [],
       reasons: Object.fromEntries(direct2.map((tool) => [tool.name, "explicit subagent scope"]))
     };
   }
-  const text = input.userText ?? "";
-  const coding = input.session.phase === "code_assist" || matches(text, /\b(code|coding|implement|refactor|bug|fix|test|typescript|javascript|python|golang|rust|file|repository|repo|build|typecheck)\b|\.(ts|tsx|js|jsx|py|go|rs)\b/);
-  const recon = ["recon", "enumeration", "hypothesis", "verification", "exploit_lab", "post_exploit_lab"].includes(input.session.phase) || hasAssessmentIntent(text) || containsNetworkTarget(text) || matches(text, /\b(port|http|https|url|domain|endpoint|directory|nmap)\b/);
-  const callback = matches(text, /\b(reverse shell|callback|listener|lhost|oast|out.of.band|ssrf|xxe)\b/);
-  const campaign = Boolean(input.session.campaignId);
-  const interactiveWeb = isInteractiveWebTask(input.session, text);
-  const rawHttp = isExplicitRawHttpTask(text);
-  const selected = new Set(ALWAYS);
-  const reasons = {};
-  for (const name of ALWAYS)
-    reasons[name] = "kernel capability";
-  if (!input.session.parentId) {
-    for (const name of ["request_user_input", "agent_spawn"]) {
-      selected.add(name);
-      reasons[name] = "root session delegation";
-    }
-  }
-  if (coding)
-    for (const name of CODING) {
-      selected.add(name);
-      reasons[name] = "coding task";
-    }
-  if (recon)
-    for (const name of RECON) {
-      selected.add(name);
-      reasons[name] = "recon task";
-    }
-  if (interactiveWeb) {
-    for (const tool of selectBrowserKernel(input.tools)) {
-      selected.add(tool.name);
-      reasons[tool.name] = "interactive web task";
-    }
-    for (const name of ["proxy_scope", "proxy_flows", "proxy_flow_get", "proxy_sitemap", "proxy_replay", "proxy_intercept", "proxy_clear"]) {
-      selected.add(name);
-      reasons[name] = "managed web proxy";
-    }
-  }
-  if (interactiveWeb || rawHttp) {
-    selected.add("http_request");
-    reasons.http_request = rawHttp ? "explicit HTTP task" : "network assessment task";
-  }
-  if (campaign)
-    for (const name of CAMPAIGN) {
-      selected.add(name);
-      reasons[name] = "active campaign";
-    }
-  if (campaign && input.session.phase === "verification") {
-    selected.add("campaign_dispatch");
-    reasons["campaign_dispatch"] = "campaign verification";
-  }
-  if (!campaign && recon) {
-    selected.add("campaign_create");
-    reasons["campaign_create"] = "campaign can be initialized for assessment work";
-  }
-  if (callback)
-    for (const name of CALLBACK) {
-      selected.add(name);
-      reasons[name] = "callback or OOB task";
-    }
-  if (matches(text, /\b(search the web|web search|research|latest|current|internet|online|source|citation|paper|documentation)\b/)) {
-    selected.add("web_search");
-    selected.add("web_fetch");
-    reasons.web_search = "current web research";
-    reasons.web_fetch = "current web research";
-  }
-  if (matches(text, /\b(image|screenshot|photo|diagram|png|jpe?g|gif|webp)\b/)) {
-    selected.add("image_view");
-    reasons.image_view = "image inspection";
-  }
-  if (matches(text, /\bmcp\b.*\b(resource|resources)\b|\b(resource|resources)\b.*\bmcp\b/)) {
-    selected.add("mcp_resource_list");
-    selected.add("mcp_resource_read");
-    reasons.mcp_resource_list = "MCP resources";
-    reasons.mcp_resource_read = "MCP resources";
-  }
-  if (input.hasActiveJobs || input.hasOutputArtifacts) {
-    for (const name of BACKGROUND) {
-      selected.add(name);
-      reasons[name] = "active or retrievable tool output";
-    }
-  }
-  if (!input.session.parentId && input.hasActiveJobs) {
-    for (const name of ["agent_list", "agent_wait", "agent_message", "agent_followup", "agent_interrupt", "agent_close"]) {
-      selected.add(name);
-      reasons[name] = "active child-agent lifecycle";
-    }
-  }
-  for (const tool of input.tools) {
-    if (exactToolMention(text, tool.name)) {
-      selected.add(tool.name);
-      reasons[tool.name] = "explicit tool mention";
-    }
-  }
-  if (input.invokedTools?.length) {
-    const invoked = new Set(input.invokedTools.map(canonicalToolName));
-    for (const tool of input.tools) {
-      if (BRIDGE.has(tool.name) || selected.has(tool.name) || !invoked.has(tool.name))
-        continue;
-      selected.add(tool.name);
-      reasons[tool.name] = "used earlier this session";
-    }
-  }
-  const direct = input.tools.filter((tool) => selected.has(tool.name) && !BRIDGE.has(tool.name));
-  const deferred = input.tools.filter((tool) => !selected.has(tool.name) && !BRIDGE.has(tool.name));
-  if (deferred.length > 0) {
-    for (const bridge of input.tools.filter((tool) => BRIDGE.has(tool.name))) {
-      direct.push(bridge);
-      reasons[bridge.name] = `${deferred.length} capabilities deferred`;
-    }
-  }
-  direct.sort((a, b) => a.name.localeCompare(b.name));
-  deferred.sort((a, b) => a.name.localeCompare(b.name));
+  const direct = [...input.tools].sort((a, b) => a.name.localeCompare(b.name));
   return {
     direct,
-    deferred,
-    reasons
+    deferred: [],
+    reasons: Object.fromEntries(direct.map((tool) => [tool.name, "available session capability"]))
   };
 }
 function toolSchemaTokens(tools) {
@@ -21668,17 +21515,8 @@ function toolSchemaTokens(tools) {
   }));
   return Math.max(0, Math.ceil(Buffer.byteLength(JSON.stringify(payload), "utf8") / 4));
 }
-var BRIDGE, ALWAYS, CODING, RECON, BROWSER_KERNEL, CAMPAIGN, CALLBACK, BACKGROUND;
 var init_capability_admission = __esm(() => {
   init_tool_names();
-  BRIDGE = new Set(["tool_search", "tool_invoke"]);
-  ALWAYS = new Set(["shell_exec", "fs_read", "fs_grep", "skill_load", "session_rename", "todo_add", "todo_update", "todo_list"]);
-  CODING = new Set(["fs_list", "fs_write", "fs_edit", "patch_apply", "notebook_edit", "git_status", "git_diff", "code_write_script", "lsp_inspect", "worktree_enter", "worktree_exit"]);
-  RECON = new Set(["port_scan", "nmap_scan", "subdomain_enum", "dir_enum", "exploit_search", "kali_tool_search", "notes_add", "evidence_save"]);
-  BROWSER_KERNEL = ["browser_context", "browser_navigate", "browser_snapshot", "browser_find", "browser_click", "browser_fill_form", "browser_type", "browser_press_key", "browser_wait_for", "browser_tabs", "browser_network_requests", "browser_network_request"];
-  CAMPAIGN = new Set(["campaign_asset", "campaign_observe", "campaign_hypothesis", "campaign_search", "campaign_next_action", "campaign_test", "campaign_verify", "report_add_finding"]);
-  CALLBACK = new Set(["callback_host_info", "callback_listen", "callback_oast", "callback_stop"]);
-  BACKGROUND = new Set(["session_poll", "session_stop", "tool_output_read"]);
 });
 
 // src/agent-core/context-index.ts
@@ -23688,26 +23526,6 @@ class ToolExecutionLease {
   }
 }
 
-class ToolGateLease {
-  quarantines = [];
-  mirrors = new Set;
-  mirrorTo(target) {
-    if (target !== this)
-      this.mirrors.add(target);
-  }
-  quarantineUntil(running, error) {
-    this.quarantines.push({
-      running,
-      error
-    });
-    for (const target of this.mirrors)
-      target.quarantineUntil(running, error);
-  }
-  takeQuarantines() {
-    return this.quarantines.splice(0);
-  }
-}
-
 class ToolExecutionDeadline {
   controller = new AbortController;
   constructor(tool, timeoutMs, parentSignal) {
@@ -23723,21 +23541,16 @@ class ToolExecutionDeadline {
         once: true
       });
   }
-  async run(work, gateLease) {
+  async run(work) {
     this.signal.throwIfAborted();
-    this.timer ??= setTimeout(() => {
-      if (!this.signal.aborted)
-        this.controller.abort(new ToolDeadlineError(this.tool, this.timeoutMs));
-    }, this.timeoutMs);
-    this.signal.throwIfAborted();
-    const running = Promise.resolve().then(work);
-    try {
-      return await abortablePromise(running, this.signal);
-    } catch (error) {
-      if (this.signal.aborted)
-        gateLease.quarantineUntil(running, abortReason(this.signal));
-      throw error;
+    if (Number.isFinite(this.timeoutMs)) {
+      this.timer ??= setTimeout(() => {
+        if (!this.signal.aborted)
+          this.controller.abort(new ToolDeadlineError(this.tool, this.timeoutMs));
+      }, this.timeoutMs);
     }
+    this.signal.throwIfAborted();
+    return await abortablePromise(Promise.resolve().then(work), this.signal);
   }
   dispose() {
     if (this.timer)
@@ -23758,12 +23571,10 @@ class ToolExecutionGate {
   }
   async run(key, parallel, fn, signal) {
     const release = await this.acquire(key, parallel ? "read" : "write", signal);
-    const lease = new ToolGateLease;
     try {
       signal?.throwIfAborted();
-      return await fn(lease);
+      return await fn();
     } finally {
-      this.quarantine(key, lease.takeQuarantines());
       release();
     }
   }
@@ -23776,14 +23587,9 @@ class ToolExecutionGate {
       const state = this.states.get(key) ?? {
         activeReaders: 0,
         activeWriter: false,
-        queue: [],
-        quarantines: new Set
+        queue: []
       };
       this.states.set(key, state);
-      if (state.quarantineError) {
-        reject(state.quarantineError);
-        return;
-      }
       const waiter = {
         mode,
         resolve: resolve5,
@@ -23812,7 +23618,7 @@ class ToolExecutionGate {
     });
   }
   drain(key, state) {
-    if (state.activeWriter || state.quarantineError)
+    if (state.activeWriter)
       return;
     const first = state.queue[0];
     if (!first)
@@ -23840,7 +23646,7 @@ class ToolExecutionGate {
     }
   }
   cleanup(key, state) {
-    if (state.activeReaders === 0 && !state.activeWriter && state.queue.length === 0 && state.quarantines.size === 0 && this.states.get(key) === state) {
+    if (state.activeReaders === 0 && !state.activeWriter && state.queue.length === 0 && this.states.get(key) === state) {
       this.states.delete(key);
       if (this.states.size === 0) {
         for (const resolve5 of this.idleResolvers)
@@ -23858,32 +23664,6 @@ class ToolExecutionGate {
       waiter.signal.removeEventListener("abort", waiter.onAbort);
     delete waiter.onAbort;
   }
-  quarantine(key, entries) {
-    if (entries.length === 0)
-      return;
-    const state = this.states.get(key);
-    if (!state)
-      return;
-    state.quarantineError ??= new ToolScopeQuarantinedError(key, entries[0].error);
-    for (const waiter of state.queue.splice(0)) {
-      this.detach(waiter);
-      waiter.reject(state.quarantineError);
-    }
-    for (const entry of entries) {
-      let tracked;
-      tracked = entry.running.catch(() => {
-        return;
-      }).finally(() => {
-        state.quarantines.delete(tracked);
-        if (state.quarantines.size === 0) {
-          delete state.quarantineError;
-          this.drain(key, state);
-          this.cleanup(key, state);
-        }
-      });
-      state.quarantines.add(tracked);
-    }
-  }
 }
 function leasedToolCapability(target, lease) {
   return new Proxy(target, {
@@ -23899,12 +23679,16 @@ function leasedToolCapability(target, lease) {
   });
 }
 function normalizeToolTimeout(timeoutMs) {
+  if (timeoutMs === Number.POSITIVE_INFINITY)
+    return timeoutMs;
   if (!Number.isFinite(timeoutMs))
     return 120000;
   return Math.max(1, Math.floor(timeoutMs));
 }
 function toolOperationTimeout(timeoutMs) {
   const deadline = normalizeToolTimeout(timeoutMs);
+  if (!Number.isFinite(deadline))
+    return deadline;
   const handoffGrace = Math.min(5000, Math.max(50, Math.floor(deadline * 0.05)));
   return Math.max(1, deadline - handoffGrace);
 }
@@ -23958,7 +23742,7 @@ function toolSchedulingDefinition(tool, args, session) {
   const targetName = canonicalToolName(String(args.name ?? ""));
   return getTool(targetName, session) ?? tool;
 }
-var ToolDeadlineError, ToolScopeQuarantinedError;
+var ToolDeadlineError;
 var init_tool_execution_control = __esm(() => {
   init_registry4();
   init_tool_names();
@@ -23970,14 +23754,6 @@ var init_tool_execution_control = __esm(() => {
       this.name = "ToolDeadlineError";
     }
   };
-  ToolScopeQuarantinedError = class ToolScopeQuarantinedError extends Error {
-    constructor(scope, cause) {
-      super(`Tool concurrency scope ${scope} is quarantined after: ${cause.message}`);
-      this.scope = scope;
-      this.cause = cause;
-      this.name = "ToolScopeQuarantinedError";
-    }
-  };
 });
 
 // src/agent-core/tool-input-validation.ts
@@ -24105,7 +23881,8 @@ function normalizeToolResult(result, input) {
     return normalized;
   const rawOutput = normalized.output;
   const sanitizedOutput = sanitizeToolOutput(rawOutput);
-  if (Buffer.byteLength(sanitizedOutput, "utf8") <= TOOL_OUTPUT_LIMITS.bytes) {
+  const binaryLike = isBinaryLike(rawOutput);
+  if (!binaryLike && Buffer.byteLength(sanitizedOutput, "utf8") <= TOOL_OUTPUT_LIMITS.bytes) {
     return sanitizedOutput === rawOutput ? normalized : {
       ...normalized,
       output: sanitizedOutput
@@ -24116,6 +23893,20 @@ function normalizeToolResult(result, input) {
     toolCallId: input.toolCallId,
     content: rawOutput
   });
+  if (binaryLike && Buffer.byteLength(sanitizedOutput, "utf8") <= TOOL_OUTPUT_LIMITS.bytes) {
+    return {
+      ...normalized,
+      output: `${sanitizedOutput}
+
+[full raw output stored as artifact ${artifact.id}; read it with tool_output_read]`,
+      outputArtifactId: artifact.id,
+      metadata: {
+        ...normalized.metadata ?? {},
+        outputArtifact: artifact,
+        binaryLike: true
+      }
+    };
+  }
   const head = takeBytes(sanitizedOutput, TOOL_OUTPUT_LIMITS.headBytes, "head");
   const tail = takeBytes(sanitizedOutput, TOOL_OUTPUT_LIMITS.tailBytes, "tail");
   return {
@@ -24551,7 +24342,11 @@ class AgentRuntime {
             });
         }
         if (!session.archivedAt) {
-          this.userInputs.recover(session.id, this.store.listEvents(session.id, 1e4));
+          const pendingUserInput = this.userInputs.recover(session.id, this.store.listEvents(session.id, 1e4));
+          const latestInterruptedTurn = [...turns].reverse().find((turn) => newlyInterruptedTurns.has(turn.id));
+          if (latestInterruptedTurn && !pendingUserInput && !this.mailbox.hasQueued(session.id)) {
+            this.inputQueue.enqueueFollowup(session.id, ["Continue the task that was interrupted by the runtime restart.", "Use the durable transcript and tool results as the source of truth.", "Do not blindly replay mutating calls; inspect current state first, then resume from the next useful action."].join(" "), "plain", `runtime-recovery:${latestInterruptedTurn.id}`);
+          }
         }
       }
       for (const job of this.store.listRecoverableJobs()) {
@@ -24564,7 +24359,7 @@ class AgentRuntime {
             continue;
           }
         }
-        this.jobs.markLost(job.id, "Background execution owner was lost during runtime restart. The original work was not replayed.", job.agentMode !== "attached");
+        this.jobs.markLost(job.id, "Background execution owner was lost during runtime restart. Durable session work is resumable, but the original in-memory process cannot be reattached.", job.agentMode !== "attached");
       }
       for (const job of this.store.listTerminalJobsMissingMailbox())
         this.jobs.repairTerminalMailbox(job.id);
@@ -25551,8 +25346,8 @@ class AgentRuntime {
     });
     let autoContinueStreak = 0;
     let resumeAfterCompaction = false;
-    const maxSteps = userAuthored ? this.maxSteps : BACKGROUND_COMPLETION_MAX_STEPS;
-    const maxTurnMs = userAuthored ? this.maxTurnMs : Number.POSITIVE_INFINITY;
+    const maxSteps = this.maxSteps;
+    const maxTurnMs = this.maxTurnMs;
     const loopStartedAt = Date.now();
     let timeBudgetWarned = false;
     let loopError;
@@ -25590,7 +25385,7 @@ class AgentRuntime {
           responses.push(...await this.forceTimeLimitWrapUp(session, turn, assistantMessage, planner, maxTurnMs));
           break;
         }
-        if (!timeBudgetWarned && elapsedMs >= maxTurnMs * 0.75) {
+        if (Number.isFinite(maxTurnMs) && !timeBudgetWarned && elapsedMs >= maxTurnMs * 0.75) {
           timeBudgetWarned = true;
           const secondsLeft = Math.max(1, Math.ceil((maxTurnMs - elapsedMs) / 1000));
           const queue = this.pendingSteeringContext.get(session.id) ?? [];
@@ -25601,10 +25396,7 @@ class AgentRuntime {
           stepCount: step + 1
         });
         if (step >= maxSteps) {
-          if (userAuthored)
-            responses.push(...await this.forceStepLimitWrapUp(session, turn, assistantMessage, planner, maxSteps));
-          else
-            this.stopTurn(turn, "completed", "no_actions");
+          responses.push(...await this.forceStepLimitWrapUp(session, turn, assistantMessage, planner, maxSteps));
           break;
         }
         const compactResult = await this.maybeAutoCompact(session, planner);
@@ -25697,7 +25489,7 @@ This completion is already terminal and was delivered automatically. Do not call
           contextWindow: resolveContextWindow(planner.contextWindow),
           maxOutputTokens: resolveMaxOutputTokens(planner.maxOutputTokens),
           ...this.contextBudgetInput(),
-          toolsEnabled: userAuthored,
+          toolsEnabled: true,
           extraBlocks: [...passiveCompletions ? [{
             title: "Completed Background Work",
             body: passiveCompletions,
@@ -25770,14 +25562,14 @@ This completion is already terminal and was delivered automatically. Do not call
           contextBlocks: context.contextBlocks,
           tools: context.tools,
           toolCatalog: context.toolCatalog,
-          toolChoice: userAuthored ? "auto" : "none"
+          toolChoice: "auto"
         };
         resumeAfterCompaction = false;
         const autoContinue = {
           streak: autoContinueStreak
         };
         const remainingTurnMs = Number.isFinite(maxTurnMs) ? Math.max(0, maxTurnMs - (Date.now() - loopStartedAt)) : undefined;
-        const control = chatProvider ? await this.streamStep(chatProvider, plannerInput, session, turn, assistantMessage, planner.name, step, context.manifest, responses, autoContinue, userAuthored, remainingTurnMs) : await this.batchStep(planner, plannerInput, session, turn, assistantMessage, step, context.manifest, responses, autoContinue, userAuthored, remainingTurnMs);
+        const control = chatProvider ? await this.streamStep(chatProvider, plannerInput, session, turn, assistantMessage, planner.name, step, context.manifest, responses, autoContinue, userAuthored, remainingTurnMs) : await this.batchStep(planner, plannerInput, session, turn, assistantMessage, step, context.manifest, responses, autoContinue, remainingTurnMs);
         autoContinueStreak = autoContinue.streak;
         if (control.cancelled)
           return responses.join(`
@@ -25900,10 +25692,10 @@ This completion is already terminal and was delivered automatically. Do not call
       latencyMs
     });
   }
-  async batchStep(planner, plannerInput, session, turn, assistantMessage, step, context, responses, autoContinue, toolsAllowed, modelTimeoutMs) {
+  async batchStep(planner, plannerInput, session, turn, assistantMessage, step, context, responses, autoContinue, modelTimeoutMs) {
     let actions;
     try {
-      actions = await this.planWithRetry(planner, plannerInput, session, turn, assistantMessage, context, modelTimeoutMs, !toolsAllowed);
+      actions = await this.planWithRetry(planner, plannerInput, session, turn, assistantMessage, context, modelTimeoutMs);
     } catch (error) {
       if (error instanceof ModelCallDeadlineError)
         return {
@@ -25947,10 +25739,7 @@ This completion is already terminal and was delivered automatically. Do not call
     };
     for (const action of actions) {
       if (action.kind === "tool") {
-        if (toolsAllowed)
-          toolBatch.push(action);
-        else
-          this.recordDisabledToolCall(session, turn, assistantMessage, step, action.toolCallId ?? action.tool, action.tool, action.args);
+        toolBatch.push(action);
         continue;
       }
       if (await flushToolBatch())
@@ -26090,10 +25879,6 @@ This completion is already terminal and was delivered automatically. Do not call
                 this.recordToolParseError(session, turn, assistantMessage, step, toolCallId ?? toolName, toolName, error instanceof Error ? error.message : String(error), event.arguments);
                 continue;
               }
-              if (!userAuthored) {
-                this.recordDisabledToolCall(session, turn, assistantMessage, step, toolCallId ?? toolName, toolName, args);
-                continue;
-              }
               const action = {
                 kind: "tool",
                 tool: toolName,
@@ -26398,10 +26183,6 @@ This completion is already terminal and was delivered automatically. Do not call
     }
   }
   async applyRespond(session, turn, assistantMessage, plannerName, text, truncated, recoverable, responses, autoContinue) {
-    if (this.isRedundantAgentTaskResponse(session.id, turn.id, text)) {
-      this.discardStreamingText(turn.id);
-      return false;
-    }
     responses.push(text);
     const streamed = this.streamingParts.get(turn.id);
     if (streamed?.textPartId) {
@@ -26421,29 +26202,11 @@ This completion is already terminal and was delivered automatically. Do not call
       recoverable
     });
     if (truncated || recoverable) {
-      if (autoContinue.streak < MAX_RECOVERABLE_AUTO_CONTINUE) {
-        autoContinue.streak += 1;
-        return true;
-      }
-      const reason = truncated ? `kept getting cut off by its token limit ${MAX_RECOVERABLE_AUTO_CONTINUE} times in a row. Consider raising maxOutputTokens in ~/.local/pajarori/farai/config.toml or asking a smaller follow-up question` : `kept failing to produce a usable response ${MAX_RECOVERABLE_AUTO_CONTINUE} times in a row`;
-      const notice = `(Model ${reason} \u2014 stopping auto-continue.)`;
-      responses.push(notice);
-      this.persistTextPart(session.id, turn.id, assistantMessage.id, notice);
-      this.event(session.id, "text", {
-        role: "assistant",
-        text: notice,
-        planner: plannerName
-      });
+      autoContinue.streak += 1;
+      return true;
     }
     return false;
   }
-  isRedundantAgentTaskResponse(sessionId, turnId, text) {
-    const candidate2 = comparableProse(text);
-    if (candidate2.length < 40)
-      return false;
-    const outputs = this.store.listMessages(sessionId, 200).flatMap((message) => message.parts).filter((part) => part.turnId === turnId && part.type === "tool_result").flatMap((part) => agentTaskOutput(part.payload));
-    return outputs.some((output) => substantiallySameProse(candidate2, comparableProse(output)));
-  }
   recordToolParseError(session, turn, assistantMessage, step, toolCallId, tool, error, rawArguments) {
     const text = `Could not parse arguments for ${tool}: ${error}. Raw: ${rawArguments.slice(0, 500)}`;
     this.store.addPart({
@@ -26486,48 +26249,6 @@ This completion is already terminal and was delivered automatically. Do not call
       payload
     });
   }
-  recordDisabledToolCall(session, turn, assistantMessage, step, toolCallId, tool, args) {
-    const text = `Tool ${tool} was not executed because this is a bounded text-only completion turn.`;
-    this.store.addPart({
-      sessionId: session.id,
-      turnId: turn.id,
-      messageId: assistantMessage.id,
-      type: "tool_call",
-      payload: {
-        record: {
-          id: toolCallId,
-          tool,
-          args
-        }
-      }
-    });
-    this.store.addPart({
-      sessionId: session.id,
-      turnId: turn.id,
-      messageId: assistantMessage.id,
-      type: "tool_result",
-      payload: {
-        toolCallId,
-        tool,
-        result: text
-      }
-    });
-    const payload = {
-      turnId: turn.id,
-      step,
-      tool,
-      error: text,
-      recoverable: false
-    };
-    this.event(session.id, "planner_error", payload);
-    this.store.addPart({
-      sessionId: session.id,
-      turnId: turn.id,
-      messageId: assistantMessage.id,
-      type: "planner_error",
-      payload
-    });
-  }
   async forceStepLimitWrapUp(session, turn, assistantMessage, planner, maxSteps) {
     return this.forceTextOnlyWrapUp({
       session,
@@ -26680,25 +26401,6 @@ This completion is already terminal and was delivered automatically. Do not call
         shouldContinue: !sawResponse
       };
     }
-    if (action.tool === "subdomain_enum") {
-      const duplicate = this.store.listToolCalls(session.id, 200).find((call2) => call2.turnId === turn.id && call2.tool === action.tool && (call2.status === "done" || call2.status === "error") && stableValue(call2.args) === stableValue(action.args));
-      if (duplicate) {
-        const text = `Equivalent ${action.tool} already finished in this turn as ${duplicate.id}; reuse its source statuses and names instead of retrying.`;
-        this.event(session.id, "planner_error", {
-          turnId: turn.id,
-          step,
-          tool: action.tool,
-          error: text,
-          recoverable: true,
-          policy: "duplicate_terminal_tool",
-          duplicateSuppressed: true,
-          duplicateToolCallId: duplicate.id
-        });
-        return {
-          shouldContinue: true
-        };
-      }
-    }
     const validationError = validateToolArgs(tool.inputSchema, action.args);
     if (validationError) {
       const toolCallId = action.toolCallId ?? action.tool;
@@ -27256,25 +26958,18 @@ This completion is already terminal and was delivered automatically. Do not call
     const workspaceTransition = isWorkspaceTransitionTool(schedulingTool);
     const gateSignal = signal ? AbortSignal.any([signal, this.shutdownController.signal]) : this.shutdownController.signal;
     try {
-      return await this.workspaceBindingGate.run(`session-workspace:${session.id}`, !workspaceTransition, async (bindingLease) => {
+      return await this.workspaceBindingGate.run(`session-workspace:${session.id}`, !workspaceTransition, async () => {
         session = this.store.loadSession(session.id);
         tool = toolForExecution(session, toolName);
         schedulingTool = toolSchedulingDefinition(tool, args, session);
-        return await this.toolExecutionGate.run(toolConcurrencyKey(schedulingTool, session, session.workspace), schedulingTool.parallel, async (gateLease) => {
-          gateLease.mirrorTo(bindingLease);
+        return await this.toolExecutionGate.run(toolConcurrencyKey(schedulingTool, session, session.workspace), schedulingTool.parallel, async () => {
           gateSignal.throwIfAborted();
           if (owner && this.store.loadTurn(owner.turn.id).status === "cancelled")
             throw new Error("turn cancelled before tool start");
-          return await this.runToolUnderGate(session, tool, args, owner, providerToolCallId, gateLease);
+          return await this.runToolUnderGate(session, tool, args, owner, providerToolCallId);
         }, gateSignal);
       }, gateSignal);
     } catch (error) {
-      if (error instanceof ToolScopeQuarantinedError) {
-        return this.recordRejectedToolCall(session, tool, args, error.message, {
-          quarantined: true,
-          reason: "concurrency_scope_quarantined"
-        }, owner, providerToolCallId);
-      }
       const ownerCancelled = owner ? this.store.loadTurn(owner.turn.id).status === "cancelled" : false;
       if (gateSignal.aborted || ownerCancelled) {
         const message = gateSignal.reason ? String(gateSignal.reason) : "turn cancelled before tool start";
@@ -27304,7 +26999,7 @@ This completion is already terminal and was delivered automatically. Do not call
     });
     return this.toolCalls.settleError(toolCall, message, state);
   }
-  async runToolUnderGate(session, tool, args, owner, providerToolCallId, gateLease) {
+  async runToolUnderGate(session, tool, args, owner, providerToolCallId) {
     const toolCall = this.toolCalls.begin({
       sessionId: session.id,
       tool: tool.name,
@@ -27319,7 +27014,7 @@ This completion is already terminal and was delivered automatically. Do not call
         providerToolCallId
       } : {}
     });
-    await this.executeToolUnderGate(session, toolCall.id, owner, gateLease);
+    await this.executeToolUnderGate(session, toolCall.id, owner);
     return this.store.loadToolCall(toolCall.id);
   }
   async executeTool(session, toolCallId, owner) {
@@ -27337,29 +27032,18 @@ This completion is already terminal and was delivered automatically. Do not call
     const gateController = turnId ? this.registerTurnController(turnId) : undefined;
     const gateSignal = gateController ? AbortSignal.any([gateController.signal, this.shutdownController.signal]) : this.shutdownController.signal;
     try {
-      return await this.workspaceBindingGate.run(`session-workspace:${session.id}`, !workspaceTransition, async (bindingLease) => {
+      return await this.workspaceBindingGate.run(`session-workspace:${session.id}`, !workspaceTransition, async () => {
         session = this.store.loadSession(session.id);
         tool = toolForExecution(session, toolCall.tool);
         schedulingTool = toolSchedulingDefinition(tool, toolCall.args, session);
-        return await this.toolExecutionGate.run(toolConcurrencyKey(schedulingTool, session, session.workspace), schedulingTool.parallel, async (gateLease) => {
-          gateLease.mirrorTo(bindingLease);
+        return await this.toolExecutionGate.run(toolConcurrencyKey(schedulingTool, session, session.workspace), schedulingTool.parallel, async () => {
           gateSignal.throwIfAborted();
           if (turnId && this.store.loadTurn(turnId).status === "cancelled")
             throw new Error("turn cancelled before tool start");
-          return await this.executeToolUnderGate(session, toolCallId, owner, gateLease);
+          return await this.executeToolUnderGate(session, toolCallId, owner);
         }, gateSignal);
       }, gateSignal);
     } catch (error) {
-      if (error instanceof ToolScopeQuarantinedError) {
-        const rejected = this.store.loadToolCall(toolCallId);
-        if (rejected.status === "pending") {
-          return this.toolCalls.settleError(rejected, error.message, {
-            quarantined: true,
-            reason: "concurrency_scope_quarantined"
-          });
-        }
-        return rejected;
-      }
       if (!gateSignal.aborted && (!turnId || this.store.loadTurn(turnId).status !== "cancelled"))
         throw error;
       const cancelled = this.store.loadToolCall(toolCallId);
@@ -27376,7 +27060,7 @@ This completion is already terminal and was delivered automatically. Do not call
       gateController?.release();
     }
   }
-  async executeToolUnderGate(session, toolCallId, owner, gateLease = new ToolGateLease) {
+  async executeToolUnderGate(session, toolCallId, owner) {
     let toolCall = this.store.loadToolCall(toolCallId);
     if (toolCall.status !== "pending")
       return toolCall;
@@ -27664,7 +27348,7 @@ This completion is already terminal and was delivered automatically. Do not call
             ...nestedContext,
             signal: nestedDeadline.signal,
             timeoutMs: toolOperationTimeout(target.timeoutMs)
-          }), gateLease);
+          }));
           lease.assertActive();
           await this.fireHooks(session, "tool.post", canonicalName, {
             tool: canonicalName,
@@ -27724,22 +27408,10 @@ This completion is already terminal and was delivered automatically. Do not call
         linkToolCall = true
       }) => {
         lease.assertActive();
-        let depth = 0;
-        let parentId = session.parentId;
-        while (parentId) {
-          depth += 1;
-          parentId = this.store.loadSession(parentId).parentId;
-          if (depth > 4)
-            break;
-        }
-        if (depth >= 1)
-          throw new Error("nested campaign delegation is disabled; child workers are leaf agents");
-        if (resumeSessionId && (lane || tools || model))
-          throw new Error("resumed subagents preserve their original lane, model, and tool scope");
         const previousJob = resumeSessionId ? this.store.listJobs(session.id, 1e4).find((job2) => job2.kind === "agent" && job2.childSessionId === resumeSessionId) : undefined;
         const effectiveLane = lane ?? previousJob?.lane;
         const laneDef = effectiveLane ? resolveLane(this.workspace, effectiveLane) : undefined;
-        if (!resumeSessionId && effectiveLane && !laneDef)
+        if (effectiveLane && !laneDef)
           throw new Error(`unknown subagent lane: ${effectiveLane}`);
         let child;
         let scopedTools;
@@ -27753,10 +27425,22 @@ This completion is already terminal and was delivered automatically. Do not call
           const active = this.store.listJobs(session.id, 1e4).some((job2) => job2.kind === "agent" && job2.childSessionId === child.id && ["created", "starting", "running", "cancelling"].includes(job2.status));
           if (active || this.hasRunningTurn(child.id))
             throw new Error(`subagent session ${child.id} is already running`);
-          scopedTools = child.toolScope;
+          const requestedTools = tools ?? laneDef?.tools;
+          scopedTools = requestedTools ? resolveSubagentToolScope({
+            parent: session,
+            availableTools: listToolsForSession(session),
+            requestedTools
+          }) : child.toolScope;
           editsSharedWorkspace = hasSharedWorkspaceEdits(scopedTools);
-          if (mode === "detached" && editsSharedWorkspace)
-            throw new Error("detached subagents cannot hold shared workspace edit tools; use an attached code worker or a read-only lane");
+          const childModel = model ?? laneDef?.model;
+          if (childModel && childModel !== child.model)
+            child = this.updateSession(child.id, {
+              model: childModel
+            });
+          if (requestedTools && scopedTools?.length)
+            child = this.updateSession(child.id, {
+              toolScope: scopedTools
+            });
         } else {
           const requestedTools = tools ?? laneDef?.tools;
           scopedTools = resolveSubagentToolScope({
@@ -27767,8 +27451,6 @@ This completion is already terminal and was delivered automatically. Do not call
             } : {}
           });
           editsSharedWorkspace = hasSharedWorkspaceEdits(scopedTools);
-          if (mode === "detached" && editsSharedWorkspace)
-            throw new Error("detached subagents cannot hold shared workspace edit tools; use an attached code worker or a read-only lane");
           const childModel = model ?? laneDef?.model;
           child = await this.store.forkSession(session.id, title);
           this.recordSession(child);
@@ -27876,8 +27558,8 @@ This completion is already terminal and was delivered automatically. Do not call
               this.jobs.completeAgent(job.id, response, mode === "detached");
               return response;
             };
-            const gated = () => this.subagentGate.run(execute, agentController.signal);
-            return editsSharedWorkspace ? await this.subagentWorkspaceMutationGate.run(gated, agentController.signal) : await gated();
+            const gated = () => session.parentId ? execute() : this.subagentGate.run(execute, agentController.signal);
+            return editsSharedWorkspace && !session.parentId ? await this.subagentWorkspaceMutationGate.run(gated, agentController.signal) : await gated();
           } catch (error) {
             if (this.store.isOpen() && this.hasJob(job.id)) {
               const current = this.store.loadJob(job.id);
@@ -27931,7 +27613,6 @@ This completion is already terminal and was delivered automatically. Do not call
         this.turnControllers.delete(turnId);
     };
     let result;
-    const duplicate = findEquivalentBackgroundJob(activeBackgroundJobs(this.store.listToolCalls(session.id, 200)), toolCall.tool, toolCall.args);
     await this.fireHooks(session, "tool.pre", toolCall.tool, {
       tool: toolCall.tool,
       toolCallId: toolCall.id,
@@ -27939,16 +27620,7 @@ This completion is already terminal and was delivered automatically. Do not call
     });
     try {
       lease.assertActive();
-      result = duplicate && sessionManager.isTracked(duplicate.processId) ? {
-        ok: true,
-        summary: `Equivalent background job already running: processId=${duplicate.processId}`,
-        output: `Reusing ${duplicate.toolCallId}. Poll ${duplicate.processId} with session_poll instead of starting it again.`,
-        status: "running_background",
-        processId: duplicate.processId,
-        metadata: {
-          reusedBackgroundToolCallId: duplicate.toolCallId
-        }
-      } : await deadline.run(() => tool.run(toolCall.args, context), gateLease);
+      result = await deadline.run(() => tool.run(toolCall.args, context));
     } catch (error) {
       settleLiveOutput();
       releaseController();
@@ -28609,38 +28281,6 @@ function completedToolCallStatus(result) {
     return "running_background";
   return result.ok ? "done" : "error";
 }
-function agentTaskOutput(payload) {
-  if (!payload || typeof payload !== "object" || Array.isArray(payload))
-    return [];
-  const record2 = payload;
-  if (!["agent_task", "agent_spawn", "agent_followup"].includes(String(record2.tool)))
-    return [];
-  const toolResult = record2.toolResult;
-  if (!toolResult || typeof toolResult !== "object" || Array.isArray(toolResult))
-    return [];
-  const output = toolResult.output;
-  return typeof output === "string" && output.trim() ? [output] : [];
-}
-function comparableProse(value) {
-  return value.toLowerCase().replace(/[`*_>#|()[\]{}]/g, " ").replace(/[^a-z0-9./:_-]+/g, " ").replace(/\s+/g, " ").trim();
-}
-function substantiallySameProse(left, right) {
-  if (right.length < 40)
-    return false;
-  const shorter = Math.min(left.length, right.length);
-  const longer = Math.max(left.length, right.length);
-  if ((left.includes(right) || right.includes(left)) && shorter / longer >= 0.72)
-    return true;
-  const leftWords = new Set(left.split(" ").filter((word) => word.length > 2));
-  const rightWords = new Set(right.split(" ").filter((word) => word.length > 2));
-  if (leftWords.size < 8 || rightWords.size < 8)
-    return false;
-  let shared = 0;
-  for (const word of leftWords)
-    if (rightWords.has(word))
-      shared += 1;
-  return shared / leftWords.size >= 0.88 && shared / rightWords.size >= 0.88;
-}
 function recoveredJobSummary(job) {
   if (job.result && typeof job.result === "object") {
     if ("response" in job.result)
@@ -28765,7 +28405,7 @@ function sameExistingPath(left, right) {
     return false;
   }
 }
-var REASONING_MAX_BYTES2, STREAM_RENDER_INTERVAL_MS = 100, STREAM_PERSIST_INTERVAL_MS = 2000, MAX_RECOVERABLE_AUTO_CONTINUE = 3, LIVE_OUTPUT_MAX_BYTES, LIVE_OUTPUT_FLUSH_INTERVAL_MS = 150, LIVE_OUTPUT_INITIAL_DELAY_MS = 320, TOOL_HUMAN_RESULT_MAX_BYTES, BACKGROUND_COMPLETION_MAX_STEPS = 1, LOOP_SUPERVISION_NO_PROGRESS_STEPS = 12, LOOP_SUPERVISION_STEER_INTERVAL = 5, LOOP_PATTERN_MAX_PERIOD = 8, PROGRESS_ACTION_TOOLS, AUTO_COMPACTION_CONTINUATION = "[internal continuation after context compaction: Continue the active user task from the compacted prior context. Do not repeat, regenerate, or explain the summary. Resume with the exact next useful action.]", WRAPUP_MODEL_TIMEOUT_MS = 15000, DEFAULT_SHUTDOWN_GRACE_PERIOD_MS = 2000, RUNTIME_LEASE_MS = 60000, RUNTIME_HEARTBEAT_MS = 15000, RESTART_TOOL_ERROR = "Interrupted by runtime restart; tool execution was not replayed.", STEP_LIMIT_WRAPUP_DIRECTIVE = "You have reached the maximum number of steps allowed for this turn, so tools are no longer available. Do not attempt to call any tool. In a few sentences, summarize what you accomplished, the key findings or evidence so far, any blockers, and the single most useful next step. This is your final message for this turn.", TIME_LIMIT_WRAPUP_DIRECTIVE = "You have reached the interactive wall-clock budget for this turn, so tools are no longer available. Do not attempt to call any tool. Concisely summarize completed work, proven evidence, active background jobs, remaining uncertainty, and the single best next action. This is your final message for this turn.", IneffectiveCompactionError, ModelCallDeadlineError, PlannerOutputValidationError;
+var REASONING_MAX_BYTES2, STREAM_RENDER_INTERVAL_MS = 100, STREAM_PERSIST_INTERVAL_MS = 2000, LIVE_OUTPUT_MAX_BYTES, LIVE_OUTPUT_FLUSH_INTERVAL_MS = 150, LIVE_OUTPUT_INITIAL_DELAY_MS = 320, TOOL_HUMAN_RESULT_MAX_BYTES, LOOP_SUPERVISION_NO_PROGRESS_STEPS = 12, LOOP_SUPERVISION_STEER_INTERVAL = 5, LOOP_PATTERN_MAX_PERIOD = 8, PROGRESS_ACTION_TOOLS, AUTO_COMPACTION_CONTINUATION = "[internal continuation after context compaction: Continue the active user task from the compacted prior context. Do not repeat, regenerate, or explain the summary. Resume with the exact next useful action.]", WRAPUP_MODEL_TIMEOUT_MS = 15000, DEFAULT_SHUTDOWN_GRACE_PERIOD_MS = 2000, RUNTIME_LEASE_MS = 60000, RUNTIME_HEARTBEAT_MS = 15000, RESTART_TOOL_ERROR = "Interrupted by runtime restart; tool execution was not replayed.", STEP_LIMIT_WRAPUP_DIRECTIVE = "You have reached the maximum number of steps allowed for this turn, so tools are no longer available. Do not attempt to call any tool. In a few sentences, summarize what you accomplished, the key findings or evidence so far, any blockers, and the single most useful next step. This is your final message for this turn.", TIME_LIMIT_WRAPUP_DIRECTIVE = "You have reached the interactive wall-clock budget for this turn, so tools are no longer available. Do not attempt to call any tool. Concisely summarize completed work, proven evidence, active background jobs, remaining uncertainty, and the single best next action. This is your final message for this turn.", IneffectiveCompactionError, ModelCallDeadlineError, PlannerOutputValidationError;
 var init_runtime = __esm(() => {
   init_sqlite_store();
   init_registry4();
@@ -28952,10 +28592,10 @@ function extractEntities(recordId2, text) {
   const found = new Set;
   const out = [];
   for (const pattern of ENTITY_PATTERNS) {
-    const matches2 = text.match(pattern.re);
-    if (!matches2)
+    const matches = text.match(pattern.re);
+    if (!matches)
       continue;
-    for (const raw of matches2) {
+    for (const raw of matches) {
       const value = pattern.normalize ? pattern.normalize(raw) : raw;
       const key = `${pattern.type}:${value}`;
       if (found.has(key))
@@ -33856,7 +33496,8 @@ function createRequestUserInputUiState(request) {
     answers: {},
     drafts: {},
     textModeQuestionId: first && !first.choices?.length ? first.id : undefined,
-    submitting: false
+    submitting: false,
+    dismissed: false
   };
 }
 function syncRequestUserInputUiState(current, request) {
@@ -34744,6 +34385,20 @@ function createActions(store, setStore) {
           return;
         s.ui.requestUserInput.submitting = submitting;
       }));
+    },
+    requestUserInputDismissedSet(dismissed) {
+      setStore(produce((s) => {
+        if (!s.ui.requestUserInput)
+          return;
+        s.ui.requestUserInput.dismissed = dismissed;
+        if (dismissed)
+          s.ui.requestUserInput.textModeQuestionId = undefined;
+        else {
+          const question = s.snapshot.pendingUserInput?.questions[s.ui.requestUserInput.questionIndex];
+          if (question && !question.choices?.length)
+            s.ui.requestUserInput.textModeQuestionId = question.id;
+        }
+      }));
     }
   };
 }
@@ -37238,19 +36893,6 @@ function TuiStoreProvider(props) {
     const sid = store.activeSessionId;
     if (!sid || !text.trim())
       return false;
-    if (store.snapshot.pendingUserInput) {
-      actions.promptHistoryAdd(text);
-      (async () => {
-        try {
-          await port.answerUserInput(sid, text);
-          await requestSnapshotRefresh(sid);
-        } catch (error) {
-          if (!disposed && store.activeSessionId === sid)
-            actions.errorSet(error instanceof Error ? error.message : String(error));
-        }
-      })();
-      return true;
-    }
     if (promptSubmissions.has(sid) || isAgentBusy(store) || port.getRunningTurnId(sid)) {
       if (port.steer?.(sid, text)) {
         actions.promptHistoryAdd(text);
@@ -37350,12 +36992,6 @@ function TuiStoreProvider(props) {
       actions.snapshotPatched({
         pendingUserInput: undefined
       });
-      const turnId = store.snapshot.runningTurnId ?? port.getRunningTurnId(sid);
-      if (turnId && capabilities.cancel) {
-        try {
-          await port.cancelTurn(turnId, "user input cancelled");
-        } catch {}
-      }
       await requestSnapshotRefresh(sid);
     } catch (error) {
       if (!disposed && store.activeSessionId === sid)
@@ -38009,14 +37645,14 @@ function filterOptions(options, needle) {
     score: score2
   }));
 }
-function groupByCategory(matches2, needleActive) {
+function groupByCategory(matches, needleActive) {
   if (needleActive)
     return [{
       category: undefined,
-      matches: [...matches2]
+      matches: [...matches]
     }];
   const buckets = new Map;
-  for (const match of matches2) {
+  for (const match of matches) {
     const key = match.option.category;
     const list2 = buckets.get(key) ?? [];
     list2.push(match);
@@ -38437,6 +38073,10 @@ function routeRequestUserInput(key, state) {
   if (state.submitting)
     return consumed();
   if (key.ctrl && key.name === "c")
+    return consumed({
+      kind: "requestUserInput.dismiss"
+    });
+  if (key.ctrl && key.name === "x")
     return consumed({
       kind: "requestUserInput.cancel"
     });
@@ -38455,7 +38095,7 @@ function routeRequestUserInput(key, state) {
   if (state.textMode) {
     if (key.name === "escape")
       return consumed({
-        kind: state.canExitTextMode ? "requestUserInput.textModeExit" : "requestUserInput.cancel"
+        kind: state.canExitTextMode ? "requestUserInput.textModeExit" : "requestUserInput.dismiss"
       });
     if (key.name === "tab" && state.canExitTextMode)
       return consumed({
@@ -38470,7 +38110,7 @@ function routeRequestUserInput(key, state) {
   switch (key.name) {
     case "escape":
       return consumed({
-        kind: "requestUserInput.cancel"
+        kind: "requestUserInput.dismiss"
       });
     case "up":
       return consumed({
@@ -38795,6 +38435,10 @@ function routeBase(key, ctx) {
         return consumed({
           kind: "composer.copyLast"
         });
+      case "q":
+        return ctx.pendingUserInput ? consumed({
+          kind: "requestUserInput.show"
+        }) : PASSTHROUGH;
       case "l":
         return consumed({
           kind: "transcript.clear"
@@ -39157,7 +38801,8 @@ function KeyboardController() {
       historySearchActive: Boolean(tui.store.ui.historySearch),
       queuedCount: tui.store.snapshot.queuedPrompts.length,
       activeMainTab: tui.store.ui.activeMainTab,
-      ...pendingRequest && requestState && pendingQuestion ? {
+      pendingUserInput: Boolean(pendingRequest),
+      ...pendingRequest && requestState && pendingQuestion && !requestState.dismissed ? {
         requestUserInput: {
           textMode: requestState.textModeQuestionId === pendingQuestion.id,
           canExitTextMode: Boolean(pendingQuestion.choices?.length),
@@ -39258,6 +38903,13 @@ function KeyboardController() {
         await tui.answerUserInputQuestion(current.question.id, draft);
         return;
       }
+      case "requestUserInput.dismiss":
+        tui.actions.requestUserInputDismissedSet(true);
+        composer.focus();
+        return;
+      case "requestUserInput.show":
+        tui.actions.requestUserInputDismissedSet(false);
+        return;
       case "requestUserInput.cancel":
         await tui.cancelUserInput();
         return;
@@ -40099,8 +39751,8 @@ function KeyboardController() {
     const search = tui.store.ui.historySearch;
     if (!search)
       return;
-    const matches2 = currentHistoryMatches();
-    const preview = matches2[search.index] ?? search.originalDraft;
+    const matches = currentHistoryMatches();
+    const preview = matches[search.index] ?? search.originalDraft;
     composer.setDraft(preview);
   }
   async function openExternalEditor() {
@@ -45166,15 +44818,15 @@ var init_status_indicator = __esm(() => {
 });
 
 // src/agent-tui/dialog/list-selection.ts
-function selectableIndex(matches2, requested) {
-  const enabled = matches2.filter((match) => !match.option.disabled);
+function selectableIndex(matches, requested) {
+  const enabled = matches.filter((match) => !match.option.disabled);
   if (enabled.length === 0)
     return -1;
   return Math.max(0, Math.min(requested, enabled.length - 1));
 }
-function selectedOptionId(matches2, requested) {
-  const index = selectableIndex(matches2, requested);
-  return index < 0 ? undefined : matches2.filter((match) => !match.option.disabled)[index]?.option.id;
+function selectedOptionId(matches, requested) {
+  const index = selectableIndex(matches, requested);
+  return index < 0 ? undefined : matches.filter((match) => !match.option.disabled)[index]?.option.id;
 }
 function scrollWindowStart(total, cap, selectedIndex) {
   if (total <= cap || selectedIndex < 0)
@@ -45183,8 +44835,8 @@ function scrollWindowStart(total, cap, selectedIndex) {
     return 0;
   return Math.min(selectedIndex - cap + 1, total - cap);
 }
-function displayRows(matches2, selectedId) {
-  return matches2.map((match) => ({
+function displayRows(matches, selectedId) {
+  return matches.map((match) => ({
     option: match.option,
     matched: match.score > 0,
     disabled: Boolean(match.option.disabled),
@@ -45275,9 +44927,9 @@ var init_selection_row = __esm(() => {
 function ListOverlay(props) {
   const tui = useTuiStore();
   const dims = useTerminalDimensions();
-  const matches2 = createMemo(() => filterOptions(props.options, props.frame.query));
-  const groups = createMemo(() => groupByCategory(matches2(), props.frame.query.trim() !== ""));
-  const selectedId = createMemo(() => selectedOptionId(matches2(), props.frame.index));
+  const matches = createMemo(() => filterOptions(props.options, props.frame.query));
+  const groups = createMemo(() => groupByCategory(matches(), props.frame.query.trim() !== ""));
+  const selectedId = createMemo(() => selectedOptionId(matches(), props.frame.index));
   const rows = createMemo(() => selectionRows(groups(), selectedId()));
   const width = () => Math.max(30, dims().width);
   const maxRows = () => overlayMaxRows(props.frame.kind, dims().height);
@@ -45294,7 +44946,7 @@ function ListOverlay(props) {
   const descCol = () => descriptionColumn(visibleRows(), width());
   const subtitle = () => overlaySubtitle(props.frame.kind);
   const selectOption = (id2) => {
-    const enabled = matches2().filter((match) => !match.option.disabled);
+    const enabled = matches().filter((match) => !match.option.disabled);
     const index = enabled.findIndex((match) => match.option.id === id2);
     if (index >= 0)
       tui.actions.overlaySetIndex(index, enabled.length);
@@ -45343,7 +44995,7 @@ function ListOverlay(props) {
         return dims().height;
       },
       get matches() {
-        return matches2();
+        return matches();
       },
       get selectedId() {
         return selectedId();
@@ -45380,14 +45032,14 @@ function ListOverlay(props) {
     })());
     insert(_el$6, (() => {
       var _c$2 = memo2(() => !!props.frame.query);
-      return () => _c$2() ? `${matches2().length}/${props.options.length}` : memo2(() => matches2().length > 0)() ? `${Math.min(props.frame.index + 1, matches2().length)}/${matches2().length}` : "";
+      return () => _c$2() ? `${matches().length}/${props.options.length}` : memo2(() => matches().length > 0)() ? `${Math.min(props.frame.index + 1, matches().length)}/${matches().length}` : "";
     })());
     setProp(_el$7, "style", {
       flexDirection: "column"
     });
     insert(_el$7, createComponent2(Show, {
       get when() {
-        return matches2().length > 0;
+        return matches().length > 0;
       },
       get fallback() {
         return (() => {
@@ -45431,7 +45083,7 @@ function ListOverlay(props) {
     }));
     insert(_el$, createComponent2(SelectionMenuHint, {
       get text() {
-        return overlayHint(props.frame, matches2(), tui.store.ui.modelProviders);
+        return overlayHint(props.frame, matches(), tui.store.ui.modelProviders);
       }
     }), null);
     effect((_p$) => {
@@ -46000,10 +45652,10 @@ function overlaySubtitle(kind) {
     return "inspect durable memory";
   return "";
 }
-function overlayHint(frame, matches2, providers) {
+function overlayHint(frame, matches, providers) {
   if (frame.kind !== "model")
     return "press enter to confirm or esc to go back";
-  const enabled = matches2.filter((match) => !match.option.disabled);
+  const enabled = matches.filter((match) => !match.option.disabled);
   const selected = enabled[frame.index]?.option.value;
   if (selected?.kind === "model_action")
     return "enter add provider \xB7 ctrl+a add \xB7 esc back";
@@ -46311,20 +45963,20 @@ function requestStatusDetail(width, progress, countdown) {
 function requestUserInputHint(width, textMode, hasChoices) {
   if (textMode) {
     if (width >= 76)
-      return `enter continue \xB7 ${hasChoices ? "tab choices \xB7 " : ""}ctrl+p/n questions \xB7 esc ${hasChoices ? "choices" : "cancel"}`;
+      return `enter continue \xB7 ${hasChoices ? "tab choices \xB7 " : ""}ctrl+p/n questions \xB7 esc ${hasChoices ? "choices" : "chat"} \xB7 ctrl+x cancel`;
     if (width >= 52)
-      return `enter \xB7 ctrl+p/n questions \xB7 esc ${hasChoices ? "choices" : "cancel"}`;
-    return `enter \xB7 esc ${hasChoices ? "choices" : "cancel"}`;
+      return `enter \xB7 ctrl+p/n questions \xB7 esc ${hasChoices ? "choices" : "chat"}`;
+    return `enter \xB7 esc ${hasChoices ? "choices" : "chat"}`;
   }
   if (width >= 86)
-    return "\u2191\u2193 select \xB7 1-9 choose \xB7 \u2190\u2192/ctrl+p/n questions \xB7 tab other \xB7 esc cancel";
+    return "\u2191\u2193 select \xB7 1-9 choose \xB7 \u2190\u2192/ctrl+p/n questions \xB7 tab other \xB7 esc chat \xB7 ctrl+x cancel";
   if (width >= 58)
-    return "\u2191\u2193 select \xB7 enter \xB7 \u2190\u2192 questions \xB7 tab other \xB7 esc cancel";
+    return "\u2191\u2193 select \xB7 enter \xB7 \u2190\u2192 questions \xB7 tab other \xB7 esc chat";
   if (width >= 42)
-    return "\u2191\u2193 select \xB7 enter \xB7 tab other \xB7 esc cancel";
+    return "\u2191\u2193 select \xB7 enter \xB7 tab other \xB7 esc chat";
   if (width >= 34)
-    return "\u2191\u2193 select \xB7 enter \xB7 esc cancel";
-  return "\u2191\u2193 \xB7 enter \xB7 esc";
+    return "\u2191\u2193 select \xB7 enter \xB7 esc chat";
+  return "\u2191\u2193 \xB7 enter \xB7 esc chat";
 }
 function requestOptionRows(question) {
   if (!question?.choices?.length)
@@ -46900,7 +46552,8 @@ function BottomPane() {
   const proxyTabActive = () => slot() === "proxy_tab";
   const providerWizardActive = () => Boolean(tui.store.ui.modelProviderWizard);
   const providerRemovalActive = () => Boolean(tui.store.ui.modelProviderRemoval);
-  const inputRequestActive = () => Boolean(tui.store.snapshot.pendingUserInput);
+  const inputRequestActive = () => Boolean(tui.store.snapshot.pendingUserInput && !tui.store.ui.requestUserInput?.dismissed);
+  const inputRequestPending = () => Boolean(tui.store.snapshot.pendingUserInput);
   const footerHidden = () => Boolean(frame()) || Boolean(centerFrame()) || slashPanelActive() || proxyTabActive() || inputRequestActive() || providerWizardActive() || providerRemovalActive();
   const inlineStatusDetail = () => {
     const detail = tui.store.ui.statusDetail;
@@ -46960,10 +46613,10 @@ function BottomPane() {
         return tui.store.ui.lastError;
       },
       children: (error) => (() => {
-        var _el$2 = createElement("text");
-        insert(_el$2, () => `\u2022 error \xB7 ${truncateLine2(error(), 160)}`);
-        effect((_$p) => setProp(_el$2, "fg", COLOR.error, _$p));
-        return _el$2;
+        var _el$4 = createElement("text");
+        insert(_el$4, () => `\u2022 error \xB7 ${truncateLine2(error(), 160)}`);
+        effect((_$p) => setProp(_el$4, "fg", COLOR.error, _$p));
+        return _el$4;
       })()
     }), null);
     insert(_el$, createComponent2(Show, {
@@ -46974,6 +46627,17 @@ function BottomPane() {
         return createComponent2(PendingInputPreview, {});
       }
     }), null);
+    insert(_el$, createComponent2(Show, {
+      get when() {
+        return memo2(() => !!(!inputRequestActive() && inputRequestPending() && !providerWizardActive()))() && !providerRemovalActive();
+      },
+      get children() {
+        var _el$2 = createElement("text");
+        insertNode(_el$2, createTextNode(`  question pending \xB7 ctrl+q answer \xB7 chat input remains available`));
+        effect((_$p) => setProp(_el$2, "fg", COLOR.warning, _$p));
+        return _el$2;
+      }
+    }), null);
     insert(_el$, createComponent2(Show, {
       get when() {
         return tui.store.ui.modelProviderRemoval;
@@ -46986,7 +46650,7 @@ function BottomPane() {
           get fallback() {
             return createComponent2(Show, {
               get when() {
-                return tui.store.snapshot.pendingUserInput;
+                return memo2(() => !!inputRequestActive())() ? tui.store.snapshot.pendingUserInput : undefined;
               },
               get fallback() {
                 return createComponent2(Show, {
@@ -47063,54 +46727,54 @@ function BottomPane() {
 function ProxyTabFooter() {
   const tui = useTuiStore();
   return (() => {
-    var _el$3 = createElement("box"), _el$4 = createElement("text"), _el$6 = createElement("text");
-    insertNode(_el$3, _el$4);
-    insertNode(_el$3, _el$6);
-    setProp(_el$3, "style", {
+    var _el$5 = createElement("box"), _el$6 = createElement("text"), _el$8 = createElement("text");
+    insertNode(_el$5, _el$6);
+    insertNode(_el$5, _el$8);
+    setProp(_el$5, "style", {
       height: 1,
       flexDirection: "row",
       justifyContent: "space-between",
       paddingLeft: 1,
       paddingRight: 1
     });
-    insertNode(_el$4, createTextNode(`\u2191\u2193 flow \xB7 tab detail \xB7 p/n ws msg \xB7 \u2190\u2192 filter \xB7 a/h/w tabs \xB7 ctrl+1 chat`));
-    insert(_el$6, () => `proxy \xB7 ${tui.store.ui.proxyFilter}`);
+    insertNode(_el$6, createTextNode(`\u2191\u2193 flow \xB7 tab detail \xB7 p/n ws msg \xB7 \u2190\u2192 filter \xB7 a/h/w tabs \xB7 ctrl+1 chat`));
+    insert(_el$8, () => `proxy \xB7 ${tui.store.ui.proxyFilter}`);
     effect((_p$) => {
       var _v$ = COLOR.dim, _v$2 = COLOR.dim;
-      _v$ !== _p$.e && (_p$.e = setProp(_el$4, "fg", _v$, _p$.e));
-      _v$2 !== _p$.t && (_p$.t = setProp(_el$6, "fg", _v$2, _p$.t));
+      _v$ !== _p$.e && (_p$.e = setProp(_el$6, "fg", _v$, _p$.e));
+      _v$2 !== _p$.t && (_p$.t = setProp(_el$8, "fg", _v$2, _p$.t));
       return _p$;
     }, {
       e: undefined,
       t: undefined
     });
-    return _el$3;
+    return _el$5;
   })();
 }
 function CenterSurfaceFooter(props) {
   return (() => {
-    var _el$7 = createElement("box"), _el$8 = createElement("text"), _el$9 = createElement("text");
-    insertNode(_el$7, _el$8);
-    insertNode(_el$7, _el$9);
-    setProp(_el$7, "style", {
+    var _el$9 = createElement("box"), _el$0 = createElement("text"), _el$1 = createElement("text");
+    insertNode(_el$9, _el$0);
+    insertNode(_el$9, _el$1);
+    setProp(_el$9, "style", {
       height: 1,
       flexDirection: "row",
       justifyContent: "space-between",
       paddingLeft: 1,
       paddingRight: 1
     });
-    insert(_el$8, () => centerSurfaceFooter(props.frame).toLowerCase());
-    insert(_el$9, () => props.frame.kind.toLowerCase());
+    insert(_el$0, () => centerSurfaceFooter(props.frame).toLowerCase());
+    insert(_el$1, () => props.frame.kind.toLowerCase());
     effect((_p$) => {
       var _v$3 = COLOR.dim, _v$4 = COLOR.dim;
-      _v$3 !== _p$.e && (_p$.e = setProp(_el$8, "fg", _v$3, _p$.e));
-      _v$4 !== _p$.t && (_p$.t = setProp(_el$9, "fg", _v$4, _p$.t));
+      _v$3 !== _p$.e && (_p$.e = setProp(_el$0, "fg", _v$3, _p$.e));
+      _v$4 !== _p$.t && (_p$.t = setProp(_el$1, "fg", _v$4, _p$.t));
       return _p$;
     }, {
       e: undefined,
       t: undefined
     });
-    return _el$7;
+    return _el$9;
   })();
 }
 var init_bottom_pane = __esm(() => {
@@ -47669,9 +47333,9 @@ async function ensureSession(input) {
     } catch {
       const needle = input.sessionId.trim().toLowerCase();
       const sessions2 = await input.runtime.listSessions();
-      const matches2 = sessions2.filter((session) => session.id.toLowerCase().startsWith(needle) || session.title?.trim().toLowerCase() === needle);
-      if (matches2.length === 1)
-        return matches2[0].id;
+      const matches = sessions2.filter((session) => session.id.toLowerCase().startsWith(needle) || session.title?.trim().toLowerCase() === needle);
+      if (matches.length === 1)
+        return matches[0].id;
       throw new SessionResolutionError(input.sessionId, input.workspace, sessions2);
     }
   }
@@ -50303,5 +49967,5 @@ Examples:
 `);
 }
 
-//# debugId=A6CB55D8D7667DD664756E2164756E21
+//# debugId=231A9E4A58F7AFCB64756E2164756E21
 //# sourceMappingURL=index.js.map