negotium 0.1.20 → 0.1.22

package/dist/cron.js

@@ -1831,201 +1831,6 @@ var init_sensitive_path = __esm(() => {
   ];
 });
 
-// ../../packages/core/src/storage/vault-crypto.ts
-import { createCipheriv, createDecipheriv, createHash, randomBytes as randomBytes3 } from "crypto";
-function encryptionKey(masterKey = VAULT_MASTER_KEY) {
-  return createHash("sha256").update("otium-vault-value-v1\x00", "utf8").update(masterKey, "utf8").digest().subarray(0, KEY_BYTES);
-}
-function aad(userId, key) {
-  return Buffer.from(`${userId}\x00${key.toUpperCase()}`, "utf8");
-}
-function isEncryptedVaultValue(value) {
-  return value.startsWith(ENVELOPE_PREFIX);
-}
-function encryptVaultValue(userId, key, value, masterKey = VAULT_MASTER_KEY) {
-  const iv = randomBytes3(IV_BYTES);
-  const cipher = createCipheriv("aes-256-gcm", encryptionKey(masterKey), iv);
-  cipher.setAAD(aad(userId, key));
-  const ciphertext = Buffer.concat([cipher.update(value, "utf8"), cipher.final()]);
-  const tag = cipher.getAuthTag();
-  return `${ENVELOPE_PREFIX}${iv.toString("base64url")}.${ciphertext.toString("base64url")}.${tag.toString("base64url")}`;
-}
-function decryptVaultValue(userId, key, storedValue, masterKey = VAULT_MASTER_KEY) {
-  if (!isEncryptedVaultValue(storedValue)) {
-    return { value: storedValue, legacyPlaintext: true };
-  }
-  const encoded = storedValue.slice(ENVELOPE_PREFIX.length);
-  const [ivPart, ciphertextPart, tagPart, ...extra] = encoded.split(".");
-  if (!ivPart || ciphertextPart === undefined || !tagPart || extra.length > 0) {
-    throw new Error("Invalid encrypted vault value");
-  }
-  const iv = Buffer.from(ivPart, "base64url");
-  const ciphertext = Buffer.from(ciphertextPart, "base64url");
-  const tag = Buffer.from(tagPart, "base64url");
-  if (iv.length !== IV_BYTES || tag.length !== 16) {
-    throw new Error("Invalid encrypted vault value");
-  }
-  const decipher = createDecipheriv("aes-256-gcm", encryptionKey(masterKey), iv);
-  decipher.setAAD(aad(userId, key));
-  decipher.setAuthTag(tag);
-  const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
-  return { value: plaintext.toString("utf8"), legacyPlaintext: false };
-}
-var ENVELOPE_PREFIX = "otium-vault:v1:", IV_BYTES = 12, KEY_BYTES = 32;
-var init_vault_crypto = __esm(() => {
-  init_config();
-});
-
-// ../../packages/core/src/storage/vault.ts
-import { chmodSync as chmodSync2, mkdirSync as mkdirSync7 } from "fs";
-import { join as join9 } from "path";
-function initializeVaultDatabase(database) {
-  database.exec("PRAGMA journal_mode = WAL");
-  database.exec("PRAGMA busy_timeout = 5000");
-  database.exec(`
-  CREATE TABLE IF NOT EXISTS vault (
-    user_id     TEXT    NOT NULL,
-    key         TEXT    NOT NULL,
-    value       TEXT    NOT NULL,
-    description TEXT    NOT NULL DEFAULT '',
-    PRIMARY KEY (user_id, key)
-  )
-  `);
-  {
-    const cols = database.prepare("PRAGMA table_info(vault)").all();
-    const uid = cols.find((c) => c.name === "user_id");
-    if (uid && uid.type.toUpperCase() === "INTEGER") {
-      database.exec("BEGIN");
-      database.exec(`
-      CREATE TABLE vault_migrated (
-        user_id     TEXT    NOT NULL,
-        key         TEXT    NOT NULL,
-        value       TEXT    NOT NULL,
-        description TEXT    NOT NULL DEFAULT '',
-        PRIMARY KEY (user_id, key)
-      )
-    `);
-      database.exec("INSERT INTO vault_migrated SELECT CAST(user_id AS TEXT), key, value, description FROM vault");
-      database.exec("DROP TABLE vault");
-      database.exec("ALTER TABLE vault_migrated RENAME TO vault");
-      database.exec("COMMIT");
-    }
-  }
-}
-function openVaultDatabase(dataDir) {
-  const path = join9(dataDir, "vault.db");
-  mkdirSync7(dataDir, { recursive: true });
-  const database = new Database(path, { create: true });
-  chmodSync2(path, 384);
-  initializeVaultDatabase(database);
-  return database;
-}
-function activeVaultDatabase() {
-  if (!vaultDb)
-    vaultDb = openVaultDatabase(DATA_DIR);
-  return vaultDb;
-}
-function normalizeVaultKey(key) {
-  return key.trim().toUpperCase();
-}
-function decryptRow(userId, key, storedValue) {
-  const database = activeVaultDatabase();
-  const decoded = decryptVaultValue(userId, key, storedValue, vaultMasterKey);
-  if (decoded.legacyPlaintext) {
-    database.prepare("UPDATE vault SET value = ? WHERE user_id = ? AND key = ? AND value = ?").run(encryptVaultValue(userId, key, decoded.value, vaultMasterKey), userId, key, storedValue);
-  }
-  return decoded.value;
-}
-function vaultListWithValues(userId) {
-  const rows = activeVaultDatabase().prepare("SELECT key, description, value FROM vault WHERE user_id = ? ORDER BY key").all(userId);
-  return rows.map((row) => ({
-    key: row.key,
-    description: row.description,
-    value: decryptRow(userId, row.key, row.value)
-  }));
-}
-function vaultList(userId) {
-  return activeVaultDatabase().prepare("SELECT key, description FROM vault WHERE user_id = ? ORDER BY key").all(userId);
-}
-function vaultSubstituteDetailed(userId, text) {
-  const entries = new Map(vaultListWithValues(userId).map((entry) => [entry.key, entry.value]));
-  const usedKeys = new Set;
-  const substituted = text.replace(/\{\{([^}]+)\}\}/g, (match, rawKey) => {
-    const key = normalizeVaultKey(rawKey);
-    const value = entries.get(key);
-    if (value === undefined)
-      return match;
-    usedKeys.add(key);
-    return value;
-  });
-  return { text: substituted, usedKeys: [...usedKeys] };
-}
-function valueReferencesVaultKey(userId, value) {
-  const keys = new Set(vaultList(userId).map((entry) => entry.key));
-  const visit = (candidate) => {
-    if (typeof candidate === "string") {
-      for (const match of candidate.matchAll(/\{\{([^}]+)\}\}/g)) {
-        if (keys.has(normalizeVaultKey(match[1] ?? "")))
-          return true;
-      }
-      return false;
-    }
-    if (Array.isArray(candidate))
-      return candidate.some(visit);
-    if (candidate && typeof candidate === "object") {
-      return Object.values(candidate).some(visit);
-    }
-    return false;
-  };
-  return visit(value);
-}
-function encodedSecretForms(value) {
-  const forms = new Set([
-    value,
-    encodeURIComponent(value),
-    Buffer.from(value, "utf8").toString("base64"),
-    Buffer.from(value, "utf8").toString("base64url"),
-    Buffer.from(value, "utf8").toString("hex")
-  ]);
-  forms.delete("");
-  return [...forms].sort((a, b) => b.length - a.length);
-}
-function redactVaultSecrets(userId, text) {
-  const candidates = vaultListWithValues(userId).flatMap((entry) => encodedSecretForms(entry.value).map((form) => ({ form, key: entry.key }))).sort((a, b) => b.form.length - a.form.length || a.key.localeCompare(b.key));
-  if (candidates.length === 0)
-    return text;
-  const candidatesByFirstCharacter = new Map;
-  for (const candidate of candidates) {
-    const first = candidate.form[0];
-    if (!first)
-      continue;
-    const bucket = candidatesByFirstCharacter.get(first) ?? [];
-    bucket.push(candidate);
-    candidatesByFirstCharacter.set(first, bucket);
-  }
-  let redacted = "";
-  let offset = 0;
-  while (offset < text.length) {
-    const match = candidatesByFirstCharacter.get(text[offset] ?? "")?.find((candidate) => text.startsWith(candidate.form, offset));
-    if (!match) {
-      redacted += text[offset];
-      offset += 1;
-      continue;
-    }
-    redacted += `[REDACTED:${match.key}]`;
-    offset += match.form.length;
-  }
-  return redacted;
-}
-var vaultDb, vaultMasterKey, VAULT_VALUE_MAX_BYTES;
-var init_vault = __esm(async () => {
-  init_config();
-  await init_sqlite();
-  init_vault_crypto();
-  vaultMasterKey = VAULT_MASTER_KEY;
-  VAULT_VALUE_MAX_BYTES = 64 * 1024;
-});
-
 // ../../packages/core/src/agents/vault-tool-policy.ts
 function createVaultToolPolicy(host) {
   function isVaultBrokerTool(toolName) {
@@ -2046,21 +1851,23 @@ function createVaultToolPolicy(host) {
     return false;
   }
   function shouldRedirectVaultTool(userId, toolName, input) {
-    return !isVaultBrokerTool(toolName) && host.valueReferencesVaultKey(userId, input);
+    return false;
   }
   return { isVaultBrokerTool, referencesRuntimeSecretStorage, shouldRedirectVaultTool };
 }
 var SENSITIVE_RUNTIME_NAMES, defaultVaultToolPolicy, isVaultBrokerTool, referencesRuntimeSecretStorage, shouldRedirectVaultTool;
-var init_vault_tool_policy = __esm(async () => {
+var init_vault_tool_policy = __esm(() => {
   init_sensitive_path();
-  await init_vault();
   SENSITIVE_RUNTIME_NAMES = [
     "vault.db",
     "vault-master-key",
     "runtime-mcp-secret",
     "sessions.db"
   ];
-  defaultVaultToolPolicy = createVaultToolPolicy({ isSensitivePath, valueReferencesVaultKey });
+  defaultVaultToolPolicy = createVaultToolPolicy({
+    isSensitivePath,
+    valueReferencesVaultKey: () => false
+  });
   isVaultBrokerTool = defaultVaultToolPolicy.isVaultBrokerTool;
   referencesRuntimeSecretStorage = defaultVaultToolPolicy.referencesRuntimeSecretStorage;
   shouldRedirectVaultTool = defaultVaultToolPolicy.shouldRedirectVaultTool;
@@ -2156,7 +1963,7 @@ var init_context = () => {};
 
 // ../../packages/core/src/platform/background-bash/manager.ts
 import { execFileSync as execFileSync3, spawn } from "child_process";
-import { randomBytes as randomBytes4 } from "crypto";
+import { randomBytes as randomBytes3 } from "crypto";
 function makeBgBashKey(_userId, _topic) {
   return "runtime";
 }
@@ -2173,8 +1980,8 @@ function createBackgroundBashManager(options = {}) {
   const usedPorts = new Set;
   const spawning = new Map;
   const knownContexts = new Map;
-  const runtimeCapability = options.capability ?? randomBytes4(32).toString("hex");
-  const runtimeServerId = options.serverId ?? randomBytes4(16).toString("hex");
+  const runtimeCapability = options.capability ?? randomBytes3(32).toString("hex");
+  const runtimeServerId = options.serverId ?? randomBytes3(16).toString("hex");
   const serverFile = options.serverFile ?? BACKGROUND_BASH_SERVER;
   const basePort = options.basePort ?? BG_BASH_BASE_PORT;
   const maxPort = options.maxPort ?? BG_BASH_MAX_PORT;
@@ -2851,7 +2658,9 @@ var init_mcp_config = __esm(() => {
     vault: {
       ...commonRuntimeMcpPolicy("vault"),
       build({ userId, agent }) {
-        const args = [`--user-id=${userId}`, "--list-only=true"];
+        const args = [`--user-id=${userId}`];
+        if (agent !== "codex")
+          args.push("--list-only=true");
         return buildStdioMcpServer(agent, VAULT_SERVER, args);
       }
     }
@@ -2864,6 +2673,179 @@ var init_mcp_config = __esm(() => {
   nodeMcpEntries = [];
 });
 
+// ../../packages/core/src/storage/vault-crypto.ts
+import { createCipheriv, createDecipheriv, createHash, randomBytes as randomBytes4 } from "crypto";
+function encryptionKey(masterKey = VAULT_MASTER_KEY) {
+  return createHash("sha256").update("otium-vault-value-v1\x00", "utf8").update(masterKey, "utf8").digest().subarray(0, KEY_BYTES);
+}
+function aad(userId, key) {
+  return Buffer.from(`${userId}\x00${key.toUpperCase()}`, "utf8");
+}
+function isEncryptedVaultValue(value) {
+  return value.startsWith(ENVELOPE_PREFIX);
+}
+function encryptVaultValue(userId, key, value, masterKey = VAULT_MASTER_KEY) {
+  const iv = randomBytes4(IV_BYTES);
+  const cipher = createCipheriv("aes-256-gcm", encryptionKey(masterKey), iv);
+  cipher.setAAD(aad(userId, key));
+  const ciphertext = Buffer.concat([cipher.update(value, "utf8"), cipher.final()]);
+  const tag = cipher.getAuthTag();
+  return `${ENVELOPE_PREFIX}${iv.toString("base64url")}.${ciphertext.toString("base64url")}.${tag.toString("base64url")}`;
+}
+function decryptVaultValue(userId, key, storedValue, masterKey = VAULT_MASTER_KEY) {
+  if (!isEncryptedVaultValue(storedValue)) {
+    return { value: storedValue, legacyPlaintext: true };
+  }
+  const encoded = storedValue.slice(ENVELOPE_PREFIX.length);
+  const [ivPart, ciphertextPart, tagPart, ...extra] = encoded.split(".");
+  if (!ivPart || ciphertextPart === undefined || !tagPart || extra.length > 0) {
+    throw new Error("Invalid encrypted vault value");
+  }
+  const iv = Buffer.from(ivPart, "base64url");
+  const ciphertext = Buffer.from(ciphertextPart, "base64url");
+  const tag = Buffer.from(tagPart, "base64url");
+  if (iv.length !== IV_BYTES || tag.length !== 16) {
+    throw new Error("Invalid encrypted vault value");
+  }
+  const decipher = createDecipheriv("aes-256-gcm", encryptionKey(masterKey), iv);
+  decipher.setAAD(aad(userId, key));
+  decipher.setAuthTag(tag);
+  const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+  return { value: plaintext.toString("utf8"), legacyPlaintext: false };
+}
+var ENVELOPE_PREFIX = "otium-vault:v1:", IV_BYTES = 12, KEY_BYTES = 32;
+var init_vault_crypto = __esm(() => {
+  init_config();
+});
+
+// ../../packages/core/src/storage/vault.ts
+import { chmodSync as chmodSync2, mkdirSync as mkdirSync7 } from "fs";
+import { join as join9 } from "path";
+function initializeVaultDatabase(database) {
+  database.exec("PRAGMA journal_mode = WAL");
+  database.exec("PRAGMA busy_timeout = 5000");
+  database.exec(`
+  CREATE TABLE IF NOT EXISTS vault (
+    user_id     TEXT    NOT NULL,
+    key         TEXT    NOT NULL,
+    value       TEXT    NOT NULL,
+    description TEXT    NOT NULL DEFAULT '',
+    PRIMARY KEY (user_id, key)
+  )
+  `);
+  {
+    const cols = database.prepare("PRAGMA table_info(vault)").all();
+    const uid = cols.find((c) => c.name === "user_id");
+    if (uid && uid.type.toUpperCase() === "INTEGER") {
+      database.exec("BEGIN");
+      database.exec(`
+      CREATE TABLE vault_migrated (
+        user_id     TEXT    NOT NULL,
+        key         TEXT    NOT NULL,
+        value       TEXT    NOT NULL,
+        description TEXT    NOT NULL DEFAULT '',
+        PRIMARY KEY (user_id, key)
+      )
+    `);
+      database.exec("INSERT INTO vault_migrated SELECT CAST(user_id AS TEXT), key, value, description FROM vault");
+      database.exec("DROP TABLE vault");
+      database.exec("ALTER TABLE vault_migrated RENAME TO vault");
+      database.exec("COMMIT");
+    }
+  }
+}
+function openVaultDatabase(dataDir) {
+  const path = join9(dataDir, "vault.db");
+  mkdirSync7(dataDir, { recursive: true });
+  const database = new Database(path, { create: true });
+  chmodSync2(path, 384);
+  initializeVaultDatabase(database);
+  return database;
+}
+function activeVaultDatabase() {
+  if (!vaultDb)
+    vaultDb = openVaultDatabase(DATA_DIR);
+  return vaultDb;
+}
+function normalizeVaultKey(key) {
+  return key.trim().toUpperCase();
+}
+function decryptRow(userId, key, storedValue) {
+  const database = activeVaultDatabase();
+  const decoded = decryptVaultValue(userId, key, storedValue, vaultMasterKey);
+  if (decoded.legacyPlaintext) {
+    database.prepare("UPDATE vault SET value = ? WHERE user_id = ? AND key = ? AND value = ?").run(encryptVaultValue(userId, key, decoded.value, vaultMasterKey), userId, key, storedValue);
+  }
+  return decoded.value;
+}
+function vaultListWithValues(userId) {
+  const rows = activeVaultDatabase().prepare("SELECT key, description, value FROM vault WHERE user_id = ? ORDER BY key").all(userId);
+  return rows.map((row) => ({
+    key: row.key,
+    description: row.description,
+    value: decryptRow(userId, row.key, row.value)
+  }));
+}
+function vaultSubstituteDetailed(userId, text) {
+  const entries = new Map(vaultListWithValues(userId).map((entry) => [entry.key, entry.value]));
+  const usedKeys = new Set;
+  const substituted = text.replace(/\{\{([^}]+)\}\}/g, (match, rawKey) => {
+    const key = normalizeVaultKey(rawKey);
+    const value = entries.get(key);
+    if (value === undefined)
+      return match;
+    usedKeys.add(key);
+    return value;
+  });
+  return { text: substituted, usedKeys: [...usedKeys] };
+}
+function encodedSecretForms(value) {
+  const forms = new Set([
+    value,
+    encodeURIComponent(value),
+    Buffer.from(value, "utf8").toString("base64"),
+    Buffer.from(value, "utf8").toString("base64url"),
+    Buffer.from(value, "utf8").toString("hex")
+  ]);
+  forms.delete("");
+  return [...forms].sort((a, b) => b.length - a.length);
+}
+function redactVaultSecrets(userId, text) {
+  const candidates = vaultListWithValues(userId).flatMap((entry) => encodedSecretForms(entry.value).map((form) => ({ form, key: entry.key }))).sort((a, b) => b.form.length - a.form.length || a.key.localeCompare(b.key));
+  if (candidates.length === 0)
+    return text;
+  const candidatesByFirstCharacter = new Map;
+  for (const candidate of candidates) {
+    const first = candidate.form[0];
+    if (!first)
+      continue;
+    const bucket = candidatesByFirstCharacter.get(first) ?? [];
+    bucket.push(candidate);
+    candidatesByFirstCharacter.set(first, bucket);
+  }
+  let redacted = "";
+  let offset = 0;
+  while (offset < text.length) {
+    const match = candidatesByFirstCharacter.get(text[offset] ?? "")?.find((candidate) => text.startsWith(candidate.form, offset));
+    if (!match) {
+      redacted += text[offset];
+      offset += 1;
+      continue;
+    }
+    redacted += `[REDACTED:${match.key}]`;
+    offset += match.form.length;
+  }
+  return redacted;
+}
+var vaultDb, vaultMasterKey, VAULT_VALUE_MAX_BYTES;
+var init_vault = __esm(async () => {
+  init_config();
+  await init_sqlite();
+  init_vault_crypto();
+  vaultMasterKey = VAULT_MASTER_KEY;
+  VAULT_VALUE_MAX_BYTES = 64 * 1024;
+});
+
 // ../../packages/core/src/agents/execution-host.ts
 import { AsyncLocalStorage } from "async_hooks";
 function activeHost() {
@@ -2895,7 +2877,7 @@ function hostedCodexAuthFilePath() {
 }
 var defaultHost, hostRegistrations, scopedHost;
 var init_execution_host = __esm(async () => {
-  await init_vault_tool_policy();
+  init_vault_tool_policy();
   init_config();
   init_mcp_config();
   await init_vault();
@@ -3469,7 +3451,7 @@ var init_claude_provider = __esm(async () => {
 });
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.1.20";
+var NEGOTIUM_VERSION = "0.1.22";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 import { spawn as spawn3 } from "child_process";
@@ -5448,6 +5430,10 @@ var init_ask_user = __esm(async () => {
 });
 
 // ../../packages/core/src/agents/model-catalog.ts
+function formatSelectableModel(candidate) {
+  const tier = `${candidate.intelligenceTier[0].toUpperCase()}${candidate.intelligenceTier.slice(1)}`;
+  return `${candidate.agent} / \`${candidate.model}\` [${tier}-level]: ${candidate.routingSummary}`;
+}
 function selectableModel(value) {
   const normalized = value.trim().toLowerCase();
   return SELECTABLE_MODELS.find((candidate) => candidate.model === normalized);
@@ -5470,7 +5456,7 @@ function resolveModelForAgent(agent, requested, registry) {
     return defaultModel;
   return registry.validateModel(requested) ? requested : defaultModel;
 }
-var MODEL_OWNER, SELECTABLE_MODELS, FALLBACK_ORDER, AGENT_DISPLAY_NAME;
+var MODEL_OWNER, MODEL_COST_RESEARCHED_AT = "2026-07-19", MODEL_COST_ROUTING_SUMMARY = "Cost basis (2026-07-19): Codex Pro 20x and Claude Max 20x are each $200/month; DeepSeek Pro is pay-per-token. Relative marginal token cost: DeepSeek Pro << Codex < Claude.", CODEX_PRO_20X_COST = "ChatGPT Pro 20x subscription: $200/month", CODEX_COMMUNITY_WEEKLY = "Community plan-level observation: roughly 2\u20134B raw/cached tokens per week; fresh-input equivalent is much lower and unstable (low confidence)", CLAUDE_MAX_20X_COST = "Claude Max 20x subscription: $200/month", CLAUDE_COMMUNITY_SESSION = "Community observations vary from roughly 220\u2013250K locally displayed tokens per 5-hour session to billions of cache-heavy raw tokens per week; calibrated reports value a full weekly allowance around $680\u2013$1,900 at API rates. Recent heavy-model reports reach the weekly cap after about 4\u20135 full sessions (low confidence; not a token cap)", SELECTABLE_MODELS, FALLBACK_ORDER, AGENT_DISPLAY_NAME;
 var init_model_catalog = __esm(() => {
   init_config();
   MODEL_OWNER = {
@@ -5490,47 +5476,72 @@ var init_model_catalog = __esm(() => {
     {
       model: "gpt-5.6-sol",
       agent: "codex",
-      description: "Latest frontier agentic coding model."
+      description: "Highest-capability Codex route for the hardest agentic coding work.",
+      intelligenceTier: "fable",
+      routingSummary: "hardest coding work; 5x Codex quota cost",
+      accessCost: CODEX_PRO_20X_COST,
+      marginalTokenCost: "Codex credits: $5/M uncached input, $0.50/M cached input, $30/M output",
+      estimatedUsage: `Official Pro 20x range: 300\u20131,800 local messages per 5 hours; quota weight 5x Luna. ${CODEX_COMMUNITY_WEEKLY}`
     },
     {
       model: "gpt-5.6-terra",
       agent: "codex",
-      description: "Balanced agentic coding model for everyday work."
+      description: "High-capability Codex route for complex coding and reasoning.",
+      intelligenceTier: "opus",
+      routingSummary: "complex coding and reasoning; 2.5x Codex quota cost",
+      accessCost: CODEX_PRO_20X_COST,
+      marginalTokenCost: "Codex credits: $2.50/M uncached input, $0.25/M cached input, $15/M output",
+      estimatedUsage: `Official Pro 20x range: 400\u20132,200 local messages per 5 hours; quota weight 2.5x Luna. ${CODEX_COMMUNITY_WEEKLY}`
     },
     {
       model: "gpt-5.6-luna",
       agent: "codex",
-      description: "Fast and affordable agentic coding model."
-    },
-    {
-      model: "gpt-5.5",
-      agent: "codex",
-      description: "Frontier model for complex coding, research, and real-world work."
+      description: "Default Codex route with strong everyday coding intelligence.",
+      intelligenceTier: "sonnet",
+      routingSummary: "everyday coding default; lowest Codex quota cost (1x)",
+      accessCost: CODEX_PRO_20X_COST,
+      marginalTokenCost: "Codex credits: $1/M uncached input, $0.10/M cached input, $6/M output",
+      estimatedUsage: `Official Pro 20x range: 1,000\u20135,600 local messages per 5 hours; lowest Codex quota weight (1x). ${CODEX_COMMUNITY_WEEKLY}`
     },
     {
       model: "fable",
       agent: "claude",
-      description: "Fable 5 \xB7 Most capable for your hardest and longest-running tasks \xB7 $10/$50 per Mtok"
+      description: "Highest-capability Claude route for the hardest and longest-running tasks.",
+      intelligenceTier: "fable",
+      routingSummary: "hardest long-running work; highest Claude cost; explicit request only",
+      accessCost: CLAUDE_MAX_20X_COST,
+      marginalTokenCost: "Claude API/extra usage: $10/M input, $12.50/M cache write, $1/M cache read, $50/M output",
+      estimatedUsage: `${CLAUDE_COMMUNITY_SESSION}; Fable drains weighted quota fastest, so use only on explicit user request. No stable per-model token cap is published.`
     },
     {
       model: "opus",
       agent: "claude",
-      description: "Opus 4.8 with 1M context \xB7 Best for everyday, complex tasks \xB7 $5/$25 per Mtok"
+      description: "High-capability Claude route for complex reasoning and tool-heavy work.",
+      intelligenceTier: "opus",
+      routingSummary: "complex reasoning and tool-heavy work; about 2.5x Sonnet marginal cost",
+      accessCost: CLAUDE_MAX_20X_COST,
+      marginalTokenCost: "Claude API/extra usage: $5/M input, $6.25/M cache write, $0.50/M cache read, $25/M output",
+      estimatedUsage: `${CLAUDE_COMMUNITY_SESSION}; Opus uses the shared all-model weekly pool more quickly than Sonnet. No stable per-model token cap is published.`
     },
     {
       model: "sonnet",
       agent: "claude",
-      description: "Sonnet 5 \xB7 Efficient for routine tasks \xB7 $2/$10 per Mtok \xB7 promo through Aug 31"
+      description: "Default Claude route for capable, efficient everyday work.",
+      intelligenceTier: "sonnet",
+      routingSummary: "capable everyday default; lowest Claude model cost",
+      accessCost: CLAUDE_MAX_20X_COST,
+      marginalTokenCost: "Claude API/extra usage introductory rate: $2/M input, $2.50/M cache write, $0.20/M cache read, $10/M output through 2026-08-31; then $3/M input and $15/M output",
+      estimatedUsage: `${CLAUDE_COMMUNITY_SESSION}; Sonnet also has a separate weekly allowance and normally provides the highest Claude throughput. No stable weekly token cap is published.`
     },
     {
       model: "deepseek-pro",
       agent: "maestro",
-      description: "Sonnet-level performance at lower cost \xB7 Best for everyday tasks over coding"
-    },
-    {
-      model: "deepseek-flash",
-      agent: "maestro",
-      description: "DeepSeek V4 Flash \xB7 Fast and low-cost for lightweight everyday tasks"
+      description: "API-priced Sonnet-level route for cost-efficient everyday work.",
+      intelligenceTier: "sonnet",
+      routingSummary: "cost-efficient everyday work; pay-per-token and cheapest route",
+      accessCost: "DeepSeek V4 Pro pay-as-you-go API; no monthly subscription required",
+      marginalTokenCost: "DeepSeek API: $0.435/M uncached input, $0.003625/M cached input, $0.87/M output",
+      estimatedUsage: "No subscription token cap; pay per token. Official account concurrency limit is 500 requests."
     }
   ];
   FALLBACK_ORDER = {
@@ -5779,6 +5790,39 @@ var init_browser_profiles = __esm(async () => {
 `);
 });
 
+// ../../packages/core/src/storage/runtime-process-leases.ts
+function rowToLease2(row) {
+  return {
+    role: row.role,
+    ownerId: row.owner_id,
+    pid: Number(row.pid),
+    startedAt: Number(row.started_at),
+    heartbeatAt: Number(row.heartbeat_at)
+  };
+}
+function getRuntimeProcessLease(role, now = Date.now(), staleMs = PROCESS_LEASE_STALE_MS) {
+  const row = db.query("SELECT * FROM runtime_process_leases WHERE role = ?").get(role);
+  if (!row)
+    return null;
+  const lease = rowToLease2(row);
+  return now - lease.heartbeatAt <= staleMs ? lease : null;
+}
+var PROCESS_LEASE_STALE_MS = 5000;
+var init_runtime_process_leases = __esm(async () => {
+  await init_forum_db();
+  await init_runtime_leases();
+  db.exec(`
+  CREATE TABLE IF NOT EXISTS runtime_process_leases (
+    role TEXT PRIMARY KEY,
+    owner_id TEXT NOT NULL UNIQUE,
+    pid INTEGER NOT NULL,
+    started_at INTEGER NOT NULL,
+    heartbeat_at INTEGER NOT NULL
+  )
+`);
+  db.exec("CREATE INDEX IF NOT EXISTS idx_runtime_process_leases_heartbeat ON runtime_process_leases(heartbeat_at)");
+});
+
 // ../../packages/core/src/platform/playwright/manager.ts
 import { execFileSync as execFileSync4, spawn as spawn4 } from "child_process";
 import { createHash as createHash2, randomBytes as randomBytes5 } from "crypto";
@@ -6040,7 +6084,13 @@ function selectOrphanBrowserPids(procs, liveUserDataDirs, profileRoot, selfPid)
   }
   return out;
 }
+function isBrowserJanitorOwner(leaseOwnerPid, selfPid) {
+  return leaseOwnerPid === selfPid;
+}
 function reapOrphanBrowsers() {
+  const daemonLease = getRuntimeProcessLease("node-daemon", Date.now(), Number.POSITIVE_INFINITY);
+  if (!isBrowserJanitorOwner(daemonLease?.pid ?? null, process.pid))
+    return;
   const profileRoot = resolve5(BROWSER_PROFILES_DIR);
   let pids;
   try {
@@ -6166,6 +6216,7 @@ async function spawnPlaywright(instanceKey, userId, reservedPort, browserBin = P
     String(port),
     "--host",
     "127.0.0.1",
+    "--headed",
     "--user-data-dir",
     userDataDir
   ];
@@ -6308,6 +6359,7 @@ var init_manager2 = __esm(async () => {
   init_config();
   init_logger();
   await init_browser_profiles();
+  await init_runtime_process_leases();
   BASE_PORT = PLAYWRIGHT_BASE_PORT;
   MAX_PORT = PLAYWRIGHT_MAX_PORT;
   MAX_IDLE_MS = 2 * 60 * 60 * 1000;
@@ -7006,7 +7058,7 @@ function loadAgentPrompt(filename) {
     prompt: match[2].trim()
   };
 }
-function buildRuntimeToolSection(agentKind, canSpawnSubagents = false, visualTools = false, fileDeliveryTools = false) {
+function buildRuntimeToolSection(agentKind, canSpawnSubagents = false, visualTools = false, fileDeliveryTools = false, currentModel, currentEffort) {
   const runtimeNamespace = "mcp__runtime";
   const taskNamespace = "mcp__task";
   const visualToolLine = agentKind === "codex" ? `To display charts, tables, or interactive HTML results to the user, call the \`show_html\` function in the \`${runtimeNamespace}\` namespace with { html: "<complete HTML string>", title?: "optional title" }.` : `To display charts, tables, or interactive HTML results to the user, call the MCP tool "${runtimeNamespace}__show_html" with { html: "<complete HTML string>", title?: "optional title" }.`;
@@ -7064,20 +7116,26 @@ function buildRuntimeToolSection(agentKind, canSpawnSubagents = false, visualToo
     "Do not use session communication to make another topic perform destructive changes without the user's clear intent.",
     ...spawnSubagentSection
   ];
+  const modelCatalog = SELECTABLE_MODELS.map((candidate) => `- ${formatSelectableModel(candidate)}`);
   const topicConfig = [
     "",
     "## Topic Configuration (model / agent / effort)",
+    `Current execution: agent=\`${agentKind}\`, model=\`${currentModel ?? "unknown (call get_model)"}\`, effort=\`${currentEffort ?? "provider default/off"}\`.`,
     "The user's configured agent/model/effort is intentional. Preserve it by default.",
     `When the user explicitly asks to change the model, agent backend, or reasoning effort for THIS topic, call "${runtimeNamespace}__set_model", "${runtimeNamespace}__set_agent", or "${runtimeNamespace}__set_effort". The change applies from your NEXT turn. After calling, briefly confirm and the system will continue with the new setting.`,
     "`set_effort` is available but discouraged; use it only when the user explicitly requests an effort change.",
-    "`set_model` may be called autonomously only when the current model is clearly below the task's required capability, such as complex algorithm design, proof-level math, or broad multi-file refactoring. In that case, move up one step within the same agent and end the turn. Do not use vague task complexity as a trigger.",
+    "`set_model` may be called autonomously only when the current model is clearly below the task's required capability, such as complex algorithm design, proof-level math, or broad multi-file refactoring. Choose the best-fit model directly from the same-agent catalog; model selection is not a mandatory one-step ladder. End the turn after changing it. Do not use vague task complexity as a trigger.",
     "`set_agent` autonomous calls are forbidden. Only switch agent when the user explicitly asks to switch runtime, e.g. \u201Ccodex\uB85C \uAC00\u201D, \u201Cclaude\uB85C \uBC14\uAFD4\u201D.",
     "Never use `fable` unless the user explicitly requests it; it is expensive.",
     "",
-    "Accepted values:",
-    "- claude models: `sonnet` (default), `opus`, `fable`; efforts: `low`, `medium`, `high`, `xhigh`, `max`.",
-    "- codex models: `gpt-5.6-luna` (default), `gpt-5.6-terra`, `gpt-5.6-sol`; efforts: `low`, `medium`, `high`, `xhigh`, `max`.",
-    "- maestro models: `deepseek-pro` (default), `deepseek-flash`, `deepseek`; efforts: `low`, `medium`, `high`, `xhigh`, `max`.",
+    "Model catalog (capability/cost routing guidance):",
+    MODEL_COST_ROUTING_SUMMARY,
+    ...modelCatalog,
+    "",
+    "Accepted effort values:",
+    "- claude: `low`, `medium`, `high`, `xhigh`, `max`.",
+    "- codex: `low`, `medium`, `high`, `xhigh`, `max`.",
+    "- maestro: `low`, `medium`, `high`, `xhigh`, `max`.",
     "Agent guidance when the user explicitly asks to switch: `codex` for deepest reasoning and complex code/math; `claude` for tool-heavy MCP/file automation; `maestro` for inexpensive fast drafts and lighter experiments."
   ];
   if (agentKind !== "claude") {
@@ -7100,7 +7158,7 @@ function buildTopicSystemPrompt(opts) {
     TOPIC_TITLE: opts.topicTitle,
     WORKSPACE_CWD: opts.workspaceCwd,
     UPLOADS_DIR: uploadsDir
-  }) + buildRuntimeToolSection(opts.agentKind, opts.canSpawnSubagents, opts.visualTools, opts.fileDeliveryTools);
+  }) + buildRuntimeToolSection(opts.agentKind, opts.canSpawnSubagents, opts.visualTools, opts.fileDeliveryTools, opts.currentModel, opts.currentEffort);
   if (opts.description?.trim()) {
     prompt += `
 
@@ -7116,7 +7174,7 @@ function buildChannelSystemPrompt(opts) {
     TOPIC_TITLE: opts.topicTitle,
     WORKSPACE_CWD: opts.workspaceCwd,
     UPLOADS_DIR: uploadsDir
-  }) + buildRuntimeToolSection(opts.agentKind, false, opts.visualTools, opts.fileDeliveryTools);
+  }) + buildRuntimeToolSection(opts.agentKind, false, opts.visualTools, opts.fileDeliveryTools, opts.currentModel, opts.currentEffort);
 }
 function buildManagerSystemPrompt(opts) {
   return `${buildTopicSystemPrompt(opts)}
@@ -7166,6 +7224,7 @@ User-uploaded files for this Channel are copied under "{{UPLOADS_DIR}}" as attac
 This is the shared "General" hub of the user's workspace.
 Act as the workspace manager: orient the user across topics, summarize what is going on, and route focused work to the right room.`, _topicSystemPromptTemplate = null, _channelSystemPromptTemplate = null, _managerSystemPromptTemplate = null, _visualDesignGuide = null;
 var init_builders = __esm(() => {
+  init_model_catalog();
   init_config();
   init_logger();
   PROMPTS_DIR = resolve6(PROJECT_ROOT, "src/prompts");
@@ -7278,10 +7337,6 @@ function getArchiverDef() {
 }
 function runArchiverTurn(params) {
   const { userId, topicId, topicTitle, archivePath, messageCount, mode = "deleted-topic" } = params;
-  if (mode !== "active-topic" && messageCount < MIN_ARCHIVE_MESSAGES) {
-    logger.info({ userId, topicTitle, messageCount, min: MIN_ARCHIVE_MESSAGES }, "archiver: skipped \u2014 too few messages to distil");
-    return false;
-  }
   let archiverDef;
   try {
     archiverDef = getArchiverDef();
@@ -7489,7 +7544,7 @@ ${rolled.join(`
     logger.warn({ err, topicTitle }, "archiver: failed to post #General notification");
   }
 }
-var MAX_BRIEF_ENTRIES = 8, MIN_ARCHIVE_MESSAGES = 4, MAX_SESSION_STEPS = 20, activeArchiverSessions, _archiverDef = null;
+var MAX_BRIEF_ENTRIES = 8, MAX_SESSION_STEPS = 20, activeArchiverSessions, _archiverDef = null;
 var init_archiver = __esm(async () => {
   await init_agents();
   await init_bus();
@@ -7504,6 +7559,25 @@ var init_archiver = __esm(async () => {
   activeArchiverSessions = new Map;
 });
 
+// ../../packages/core/src/agents/memory-archive-policy.ts
+function countMemoryArchiveExchanges(rows) {
+  let waitingForAssistant = false;
+  let completed = 0;
+  for (const row of rows) {
+    const assistant = row.author_id === "ai" || Boolean(row.agent_type);
+    const conversational = row.kind == null || row.kind === "message";
+    if (!assistant && row.author_id !== "system" && conversational) {
+      waitingForAssistant = true;
+      continue;
+    }
+    if (assistant && conversational && waitingForAssistant) {
+      completed++;
+      waitingForAssistant = false;
+    }
+  }
+  return completed;
+}
+
 // ../../packages/core/src/storage/topic-transcript.ts
 function parseJsonField(value) {
   if (!value)
@@ -7591,8 +7665,9 @@ function archiveTopicMessages(topicId, topicTitle, options = {}) {
       counter++;
     }
   }
-  logger.info({ topicId, topicTitle, archive: path, messageCount: rows.length, lastRowid }, "archiveTopicMessages: archived topic messages");
-  return { path, messageCount: rows.length, lastRowid };
+  const exchangeCount = countMemoryArchiveExchanges(rows);
+  logger.info({ topicId, topicTitle, archive: path, messageCount: rows.length, exchangeCount, lastRowid }, "archiveTopicMessages: archived topic messages");
+  return { path, messageCount: rows.length, exchangeCount, lastRowid };
 }
 var init_topic_archive = __esm(async () => {
   init_logger();
@@ -7796,6 +7871,7 @@ function archiveActiveTopicForMemory(topicId, userId, options) {
   if (!options.allowMentionOnly && topic.aiMode === "mention")
     return "mention-only-channel";
   let skipped = "empty";
+  let skipMemoryTurn = false;
   const claim = claimTopicArchiveJob(topicId, (afterRowid) => {
     const pending = getMessagesForTopicAfterRowid(topicId, afterRowid);
     const minMessages = options.minMessages;
@@ -7804,6 +7880,8 @@ function archiveActiveTopicForMemory(topicId, userId, options) {
       logger.debug({ topicId, topicTitle: topic.title, pending: pending.length, minMessages }, "topic-memory-archiver: skipped below threshold");
       return null;
     }
+    const exchangeCount = countMemoryArchiveExchanges(pending);
+    skipMemoryTurn = options.minExchanges !== undefined && exchangeCount < options.minExchanges;
     const archived = (options.archiveMessages ?? archiveTopicMessages)(topicId, topic.title, {
       afterRowid,
       reason: options.reason
@@ -7821,6 +7899,18 @@ function archiveActiveTopicForMemory(topicId, userId, options) {
   if (claim.kind === "busy")
     return "busy";
   const { job } = claim;
+  if (skipMemoryTurn) {
+    settleTopicArchiveJob(topicId, job.archivePath, true);
+    logger.info({
+      topicId,
+      topicTitle: topic.title,
+      messageCount: job.messageCount,
+      minExchanges: options.minExchanges,
+      archive: job.archivePath,
+      reason: options.reason
+    }, "topic-memory-archiver: raw snapshot preserved below exchange threshold");
+    return "below-threshold";
+  }
   const memoryTopic = getTopicMemoryOrigin(topicId) ?? topic;
   const launched = (options.launchArchiver ?? runArchiverTurn)({
     userId,
@@ -9723,6 +9813,7 @@ __export(exports_turn_runner, {
   isPathInside: () => isPathInside,
   isLikelyCurrentChannelTrigger: () => isLikelyCurrentChannelTrigger,
   ingestAttachment: () => ingestAttachment,
+  formatSelectableModel: () => formatSelectableModel,
   formatChannelTranscriptLine: () => formatChannelTranscriptLine,
   escapeRegExp: () => escapeRegExp,
   escapeHtml: () => escapeHtml2,
@@ -9740,6 +9831,8 @@ __export(exports_turn_runner, {
   SESSION_EXPIRED_MSG: () => SESSION_EXPIRED_MSG,
   SELECTABLE_MODELS: () => SELECTABLE_MODELS,
   MODEL_OWNER: () => MODEL_OWNER,
+  MODEL_COST_ROUTING_SUMMARY: () => MODEL_COST_ROUTING_SUMMARY,
+  MODEL_COST_RESEARCHED_AT: () => MODEL_COST_RESEARCHED_AT,
   FALLBACK_ORDER: () => FALLBACK_ORDER,
   AGENT_DISPLAY_NAME: () => AGENT_DISPLAY_NAME
 });
@@ -10947,6 +11040,8 @@ function startAiTurn(params) {
     topicTitle: topic.title,
     workspaceCwd,
     agentKind,
+    currentModel: resolvedModel,
+    currentEffort: resolvedEffort,
     description: topic.description,
     canSpawnSubagents: peerBridge?.canSpawnSubagents ?? (topicRecord?.kind === "agent" && !topicRecord.isSubagent),
     visualTools,
@@ -12034,20 +12129,7 @@ init_mcp_config();
 
 // ../../packages/core/src/platform/modules.ts
 init_logger();
-
-// ../../packages/core/src/storage/runtime-process-leases.ts
-await init_forum_db();
-await init_runtime_leases();
-db.exec(`
-  CREATE TABLE IF NOT EXISTS runtime_process_leases (
-    role TEXT PRIMARY KEY,
-    owner_id TEXT NOT NULL UNIQUE,
-    pid INTEGER NOT NULL,
-    started_at INTEGER NOT NULL,
-    heartbeat_at INTEGER NOT NULL
-  )
-`);
-db.exec("CREATE INDEX IF NOT EXISTS idx_runtime_process_leases_heartbeat ON runtime_process_leases(heartbeat_at)");
+await init_runtime_process_leases();
 
 // ../../packages/core/src/index.ts
 await init_manager2();
@@ -12183,6 +12265,7 @@ init_session_inbox_path();
 init_types2();
 await init_api_messages();
 await init_runtime_leases();
+await init_runtime_process_leases();
 await init_self_schedules();
 await init_session_asks();
 var topicWorkerBusy = new Set;
@@ -12197,6 +12280,7 @@ await init_app_settings();
 await init_forum_db();
 await init_runtime_events();
 await init_runtime_leases();
+await init_runtime_process_leases();
 await init_session_asks();
 await init_vault();
 await init_derive();
@@ -13857,4 +13941,4 @@ export {
   CRON_CONTEXT_RETAIN_TURNS
 };
 
-//# debugId=077E0F8D1E641D5B64756E2164756E21
+//# debugId=B45862ECC407392D64756E2164756E21