newmark-agent 0.5.14 → 0.6.0

package/dist/core/agent.js

@@ -35,9 +35,13 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Agent = exports.ROOT_AGENT_ACTOR_ID = void 0;
 exports.normalizeIntelligenceTier = normalizeIntelligenceTier;
+const modelResponseHealth_1 = require("./modelResponseHealth");
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const crypto = __importStar(require("crypto"));
+const promises_1 = require("node:timers/promises");
+const providerUsageAccounting_1 = require("./providerUsageAccounting");
+const requestContextEstimate_1 = require("./requestContextEstimate");
 const imageInspect_1 = require("./imageInspect");
 const conversationAttachments_1 = require("./conversationAttachments");
 const displayImages_1 = require("./displayImages");
@@ -48,6 +52,7 @@ const index_1 = require("../tools/index");
 const workspace_1 = require("./workspace");
 const ssh_1 = require("./ssh");
 const subagent_1 = require("./subagent");
+const subagentCommunication_1 = require("./subagentCommunication");
 const compat_1 = require("./compat");
 const skills_1 = require("./skills");
 const flow_1 = require("./flow");
@@ -222,6 +227,8 @@ class Agent {
     lastCompression = null;
     providerUsageTotals = { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 };
     lastProviderUsage = { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 };
+    providerUsageAccounting = (0, providerUsageAccounting_1.createAccounting)();
+    lastRequestContext = null;
     compressionCache = [];
     pendingHistoryRemovals = [];
     branchMailbox = [];
@@ -264,15 +271,25 @@ class Agent {
     activeAgentKernelRuntime = null;
     modelSwitchCompressionPromise = null;
     activePeerAgents = new Map();
+    // Bounded caller-owned peer slots retain protocol compatibility learning
+    // between mailbox jobs. They never retain the child Agent or go to disk.
+    peerProviderCaches = new Map();
     awaitingAgentKernelRuntime = false;
     pendingAgentKernelQueue = [];
     linkedPlanAccess;
     subagentContextPersist;
+    subagentPersistedHistory = [];
+    subagentPersistedCompression = null;
     agentKernelUserMessageStartSubscribers = [];
     rootInboxWakeSubscribers = [];
+    directRootInboxQueuedIds = new Set();
+    directRootWakePending = false;
+    rootInboxRetiredSubscribers = [];
     activeWorkRunId = '';
     loadedWorkspaceConversationKey = '';
     managedWorkRunIds = new Set();
+    /** Public deltas since the last completed response, retained only until its boundary. */
+    pendingPublicWorkText = new Map();
     finalizingWorkRunId = '';
     agentRunService = null;
     agentRunByWorkRunId = new Map();
@@ -308,6 +325,7 @@ class Agent {
         recentChecks: [],
     };
     rootInboxListener = (message) => this.deliverRootInboxMessage(message);
+    boundSubagentManagerKey = '';
     agentOnly;
     runtimeActorId;
     runtimeLifecycleRole;
@@ -430,6 +448,12 @@ class Agent {
         this.toolDefinitionCache.clear();
         this.status = 'idle';
     }
+    /** Selecting the composer mode does not start a Goal or reset a running Flow. */
+    selectConversationMode(mode) {
+        this.mode = ['build', 'plan', 'chat', 'goal', 'flow'].includes(mode) ? mode : 'build';
+        this.invalidateSystemPrompt();
+        this.saveWorkspaceConversationState(true);
+    }
     currentConversationFlowSelection() {
         return this.flow?.name
             ? { name: this.flow.name, pc: Math.max(0, Math.floor(Number(this.flowPc) || 0)) }
@@ -916,13 +940,12 @@ class Agent {
         return this.modelSelectionValue();
     }
     defaultModelCandidate() {
-        const rejected = new Set(['unavailable', 'auth_error', 'invalid_config']);
         return this.config.allModels()
             .map((model, index) => {
             const validationStatus = effectiveModelValidationStatus(model);
             const evaluationStatus = validationStatus === 'degraded' ? 'degraded' : String(model.evaluation?.status || '').toLowerCase();
             const level = String(model.validation?.level || '').toLowerCase();
-            if (model.enabled === false || rejected.has(validationStatus) || rejected.has(evaluationStatus) || evaluationStatus.startsWith('error')) {
+            if (model.enabled === false) {
                 return null;
             }
             let score = 0;
@@ -1036,18 +1059,20 @@ class Agent {
         this.routeAttemptStartedAt = Date.now();
     }
     async waitForPlannedRouteRetry(explicitDelayMs) {
-        if (explicitDelayMs !== undefined) {
-            if (explicitDelayMs <= 0)
-                return;
-            await new Promise(resolve => setTimeout(resolve, explicitDelayMs));
-            return;
-        }
+        // Keep the original Build owner through the entire backoff. Stopping a
+        // healthy request between attempts must not wait out a 60-second timer.
+        const signal = this.activeProcessSignal();
+        throwIfAgentAborted(signal);
         const waitBudgetMs = Math.max(0, Math.min(15_000, this.lastRouteDecision?.retryBudgetMs ?? 5_000));
-        const delay = Math.max(0, Math.min(waitBudgetMs, this.lastRouteRetryDelayMs));
-        this.lastRouteRetryDelayMs = 0;
+        const delay = explicitDelayMs === undefined
+            ? Math.max(0, Math.min(waitBudgetMs, this.lastRouteRetryDelayMs))
+            : Math.max(0, explicitDelayMs);
+        if (explicitDelayMs === undefined)
+            this.lastRouteRetryDelayMs = 0;
         if (!delay)
             return;
-        await new Promise(resolve => setTimeout(resolve, delay));
+        await (0, promises_1.setTimeout)(delay, undefined, { signal });
+        throwIfAgentAborted(signal);
     }
     recordRouteSuccess(latencyMs, throughput) {
         const deployment = this.activeDeployment();
@@ -1395,8 +1420,8 @@ class Agent {
         const reference = parsed.image;
         const hydrated = this.hydrateDisplayImage(reference);
         const model = this.activeModelConfig();
-        const provider = model?.vision ? this.engineModel() : null;
-        if (!provider || !model?.vision || !hydrated?.dataUrl || !hydrated.sha256)
+        const provider = this.engineModel();
+        if (!provider || !hydrated?.dataUrl || !hydrated.sha256)
             return raw;
         throwIfAgentAborted(signal);
         const deployment = this.activeDeployment();
@@ -1411,7 +1436,7 @@ class Agent {
             const instruction = useChinese
                 ? `请观察图片并生成一个准确、具体的中文短标题，描述图片实际内容。只输出标题，不要加“图片”“示意图”“标题”等前缀，不要使用 Markdown，最多60个汉字。${captionHint ? `调用方提示：${captionHint}` : ''}`
                 : `Inspect the image and return one accurate, concrete short title describing its actual visual content. Output only the title, with no "image", "diagram", or "title" prefix, no Markdown, and at most 100 characters.${captionHint ? ` Caller hint: ${captionHint}` : ''}`;
-            descriptionPromise = this.withTimeout(provider.chat(this.activeModelName(), [{ role: 'user', content: [
+            descriptionPromise = this.withTimeout(this.chatWithConversationUsage(provider, this.activeModelName(), [{ role: 'user', content: [
                         { type: 'text', text: instruction },
                         { type: 'image_url', image_url: { url: hydrated.dataUrl } },
                     ] }], useChinese ? '你是视觉图片标题生成器，只返回忠实、简洁的标题。' : 'You generate faithful concise titles for visual images. Return only the title.', 0, 120, signal), 30000)
@@ -1535,9 +1560,16 @@ class Agent {
                     mode: String(event.mode || this.modeName()),
                     model: String(event.model || this.model),
                     timestamp: String(event.timestamp || this.nowLabel()),
+                    toolCallId: isToolEvent && event.toolCallId ? String(event.toolCallId) : undefined,
                     toolName,
                     toolArgs: type === 'tool_call' && event.toolArgs ? this.visibleToolArgs(event.toolArgs) : undefined,
                     queue: isToolEvent ? undefined : event.queue,
+                    queueItems: isToolEvent ? undefined : event.queueItems?.map(item => ({
+                        id: item.id, text: item.text, queueMode: item.queueMode, requestedMode: item.requestedMode,
+                        images: item.images?.map(image => ({ ...image })),
+                        goalObjective: item.goalObjective, runId: item.runId, createdAt: item.createdAt,
+                    })),
+                    queuePaused: isToolEvent ? undefined : event.queuePaused,
                     workspaceId: target.workspaceId,
                     workspaceKey: event.workspaceKey,
                     runtimeKey: String(raw.runtimeKey || (0, conversationTarget_1.conversationRuntimeKey)(target)),
@@ -2250,6 +2282,9 @@ class Agent {
         const run = this.workRuns.find(item => item.runId === String(runId || ''));
         if (!run)
             return false;
+        if (status !== 'completed' && (run.status === 'running' || run.status === status || (run.status === 'interrupted' && status === 'force_interrupted'))) {
+            this.persistInterruptedPublicWorkText(run);
+        }
         this.syncAgentRunTerminal(run.runId, status, endedAt);
         this.flushPendingHistoryRemovals();
         if (run.status !== 'running') {
@@ -2346,11 +2381,23 @@ class Agent {
             conversationId: run.target.conversationId,
         });
     }
+    persistInterruptedPublicWorkText(run) {
+        const chunks = this.pendingPublicWorkText.get(run.runId);
+        this.pendingPublicWorkText.delete(run.runId);
+        const content = chunks?.join('');
+        if (!content?.trim())
+            return;
+        // This is an incomplete public reply, not a successful final answer or a
+        // model-history message. A single durable boundary replaces live deltas.
+        this.emitWorkEvent({ type: 'response', content, runId: run.runId, conversationId: run.target.conversationId });
+    }
     emitWorkEvent(input) {
         if (input.type === 'start' && !this.workRuns.some(run => run.runId === this.activeWorkRunId && run.status === 'running')) {
             this.beginConversationWorkRun(input.runId || crypto.randomUUID(), this.currentConversationTarget(input.conversationId));
         }
         const activeRun = this.workRuns.find(run => run.runId === (input.runId || this.activeWorkRunId));
+        if (activeRun && input.type === 'error')
+            this.persistInterruptedPublicWorkText(activeRun);
         const managedTurnBoundary = input.type === 'done'
             && !!activeRun
             && this.managedWorkRunIds.has(activeRun.runId)
@@ -2374,9 +2421,16 @@ class Agent {
             mode: input.mode || this.modeName(),
             model: input.model || this.model,
             timestamp: input.timestamp || this.nowLabel(),
+            toolCallId: isToolEvent ? input.toolCallId : undefined,
             toolName,
             toolArgs: publishedType === 'tool_call' && input.toolArgs ? this.visibleToolArgs(input.toolArgs) : undefined,
             queue: isToolEvent ? undefined : input.queue,
+            queueItems: isToolEvent ? undefined : input.queueItems?.map(item => ({
+                id: item.id, text: item.text, queueMode: item.queueMode, requestedMode: item.requestedMode,
+                images: item.images?.map(image => ({ ...image })),
+                goalObjective: item.goalObjective, runId: item.runId, createdAt: item.createdAt,
+            })),
+            queuePaused: isToolEvent ? undefined : input.queuePaused,
             workspaceId: input.workspaceId || activeRun?.target.workspaceId || this.currentConversationTarget(input.conversationId).workspaceId,
             workspaceKey: input.workspaceKey,
             runtimeKey: input.runtimeKey || activeRun?.runtimeKey,
@@ -2389,6 +2443,14 @@ class Agent {
             fallback: input.fallback,
         };
         if (activeRun && this.isPersistablePublicWorkEvent(event)) {
+            if (event.type === 'text' && activeRun.status === 'running') {
+                const chunks = this.pendingPublicWorkText.get(activeRun.runId) || [];
+                chunks.push(event.content);
+                this.pendingPublicWorkText.set(activeRun.runId, chunks);
+            }
+            else if (event.type === 'response' || event.type === 'final_response' || event.type === 'done' || event.type === 'error') {
+                this.pendingPublicWorkText.delete(activeRun.runId);
+            }
             activeRun.sequence = Number(sequence || activeRun.sequence + 1);
             // Streaming text is delivered live, while the complete sanitized API
             // response is persisted once at message_end. This avoids saving hundreds
@@ -2474,8 +2536,10 @@ class Agent {
     attachAgentKernelRuntime(runtime) {
         this.activeAgentKernelRuntime = runtime;
         this.awaitingAgentKernelRuntime = false;
-        if (!runtime)
+        if (!runtime) {
+            this.directRootInboxQueuedIds.clear();
             return;
+        }
         // A user stop can arrive while the Native Kernel is still being loaded or
         // assembling its first context. In that handoff window
         // abortActiveKernelRun() can only abort the outer process signal; make a
@@ -2495,11 +2559,52 @@ class Agent {
             this.agentKernelUserMessageStartSubscribers = this.agentKernelUserMessageStartSubscribers.filter(sub => sub !== fn);
         };
     }
-    subscribeRootInboxWake(fn) {
+    subscribeRootInboxWake(fn, retired) {
         this.rootInboxWakeSubscribers.push(fn);
+        if (retired)
+            this.rootInboxRetiredSubscribers.push(retired);
         return () => {
             this.rootInboxWakeSubscribers = this.rootInboxWakeSubscribers.filter(sub => sub !== fn);
+            if (retired)
+                this.rootInboxRetiredSubscribers = this.rootInboxRetiredSubscribers.filter(sub => sub !== retired);
+        };
+    }
+    /** Called only after receipt-bearing tool history has been saved, or on cold replay. */
+    acknowledgeSubagentSettlementReceipts() {
+        if (this.isSubagentRuntime)
+            return [];
+        const receipts = this.history.flatMap(message => {
+            const receipt = message.subagent_settlement_receipt;
+            return message.role === 'tool' && ['subagent_result', 'subagent_read'].includes(String(message.name || ''))
+                && receipt && typeof receipt.peerId === 'string' && Number.isSafeInteger(receipt.revision) && receipt.revision > 0
+                ? [receipt] : [];
+        });
+        if (!receipts.length)
+            return [];
+        const ids = this.subagents.acknowledgeSettlementResults(receipts);
+        if (!ids.length)
+            return [];
+        const retired = new Set(ids);
+        const matches = (content, hidden, clientMessageId) => {
+            if (!hidden || clientMessageId || typeof content !== 'string')
+                return false;
+            const id = content.match(/^\[Root subagent inbox id=([0-9a-f-]{36})\b/i)?.[1];
+            return !!id && retired.has(id);
         };
+        this.pendingAgentKernelQueue = this.pendingAgentKernelQueue.filter(item => item.queueMode !== 'followUp'
+            || !matches(item.content, item.hiddenUserInput === true, item.clientMessageId));
+        this.activeAgentKernelRuntime?.removeQueuedMessages?.((raw, mode) => {
+            const message = raw;
+            return mode === 'followUp' && matches(message.content, message.hiddenUserInput === true, message.clientMessageId);
+        });
+        const before = this.continuations.length;
+        this.continuations = this.continuations.filter(item => item.queueMode !== 'followUp'
+            || !matches(item.content, item.hiddenUserInput === true, item.clientMessageId));
+        if (this.continuations.length !== before)
+            this.saveWorkspaceConversationState(true);
+        for (const subscriber of this.rootInboxRetiredSubscribers)
+            subscriber(ids);
+        return ids;
     }
     notifyAgentKernelUserMessageStart(content, clientMessageId) {
         const text = String(content || '');
@@ -2592,7 +2697,7 @@ class Agent {
     }
     consumeConversationContinuation(match) {
         const index = this.continuations.findIndex(item => match.clientMessageId
-            ? item.clientMessageId === match.clientMessageId
+            ? item.clientMessageId === match.clientMessageId && item.queueMode === match.queueMode
             : item.queueMode === match.queueMode && item.content === match.content);
         if (index < 0)
             return false;
@@ -2636,6 +2741,9 @@ class Agent {
                 attachments: attachments.length ? attachments : undefined,
                 hiddenUserInput: raw.hiddenUserInput === true,
                 createdAt: String(raw.createdAt || new Date().toISOString()),
+                visibleUserInput: raw.visibleUserInput,
+                visibleMode: raw.visibleMode,
+                goalObjective: raw.goalObjective,
             });
         }
         return Array.from(deduped.values()).slice(-100);
@@ -2730,9 +2838,9 @@ class Agent {
         this.conversationStateDirty.delete(file);
         this.writeStoredConversationStateNow(pending.state, pending.ws);
     }
-    getStoredFlowSuspension(conversationId = this.activeConversationId) {
-        const stored = this.readStoredConversationState();
-        const stateKey = this.workspaceConversationStateKey(conversationId);
+    getStoredFlowSuspension(conversationId = this.activeConversationId, ws = this.workspace.current) {
+        const stored = this.readStoredConversationState(ws);
+        const stateKey = this.workspaceConversationStateKeyFor(conversationId, ws);
         if (stateKey && stored.flowSuspensions && stored.flowSuspensions[stateKey])
             return stored.flowSuspensions[stateKey];
         const legacy = stored.flowSuspension || null;
@@ -2741,8 +2849,8 @@ class Agent {
         const legacyTargetsThis = !legacy.target || (legacy.target.conversationId === conversationId);
         return legacyTargetsThis ? legacy : null;
     }
-    saveStoredFlowSuspension(suspension, conversationId = this.activeConversationId) {
-        const stateKey = this.workspaceConversationStateKey(conversationId);
+    saveStoredFlowSuspension(suspension, conversationId = this.activeConversationId, ws = this.workspace.current) {
+        const stateKey = this.workspaceConversationStateKeyFor(conversationId, ws);
         if (!stateKey)
             return;
         // Use the lock-aware latest-state mutator directly. Passing a partial
@@ -2750,7 +2858,7 @@ class Agent {
         // merge the deleted key back from the latest disk snapshot, making Stop,
         // archive, and new-work handoff appear to clear a suspension in memory
         // while it immediately reappears after reload.
-        this.mutateStoredConversationState(this.workspace.current, latest => {
+        this.mutateStoredConversationState(ws, latest => {
             const flowSuspensions = { ...(latest.flowSuspensions || {}) };
             if (suspension) {
                 flowSuspensions[stateKey] = { ...suspension, updatedAt: suspension.updatedAt || new Date().toISOString() };
@@ -2763,8 +2871,8 @@ class Agent {
             return next;
         });
     }
-    clearStoredFlowSuspension(conversationId = this.activeConversationId) {
-        this.saveStoredFlowSuspension(null, conversationId);
+    clearStoredFlowSuspension(conversationId = this.activeConversationId, ws = this.workspace.current) {
+        this.saveStoredFlowSuspension(null, conversationId, ws);
     }
     getStoredConversationDraft(conversationId = this.activeConversationId) {
         const key = this.workspaceConversationStateKey(conversationId);
@@ -3070,8 +3178,10 @@ class Agent {
         if (this.isSubagentRuntime)
             return;
         const clean = this.safeConversationId(conversationId || 'default');
-        this.subagents.removeRootInboxListener(this.rootInboxListener);
-        this.subagents = (0, subagent_1.sharedSubagentManager)(this.subagentManagerKey(clean), {
+        const managerKey = this.subagentManagerKey(clean);
+        if (this.boundSubagentManagerKey !== managerKey)
+            this.subagents.releaseOwnerBinding(this.rootInboxListener);
+        this.subagents = (0, subagent_1.sharedSubagentManager)(managerKey, {
             conversationId: clean,
             rootAgentId: state?.rootAgentId || this.runtimeActorId,
             concurrency: this.subagentConcurrencyLimit(),
@@ -3086,6 +3196,22 @@ class Agent {
                     this.saveWorkspaceConversationState();
             },
         });
+        this.boundSubagentManagerKey = managerKey;
+    }
+    /** Release an idle facade; shared peer state remains available to its next owner. */
+    releaseConversationRuntimeBindings() {
+        if (this.activeProcessSignal() || (this.subagents.ownsExecutionBinding(this.rootInboxListener) && this.subagents.hasPendingWork())) {
+            throw new Error('Cannot release a conversation owner with running or queued work');
+        }
+        this.flushWorkspaceConversationState();
+        this.subagents.releaseOwnerBinding(this.rootInboxListener);
+    }
+    assertPeerOwnerCanSwitch(conversationId, workspaceId = this.workspace.current?.id) {
+        const changesTarget = this.safeConversationId(conversationId || 'default') !== this.activeConversationId
+            || workspaceId !== this.workspace.current?.id;
+        if (changesTarget && this.subagents.ownsExecutionBinding(this.rootInboxListener) && this.subagents.hasPendingWork()) {
+            throw new Error('Cannot switch an execution owner with running or queued subagents');
+        }
     }
     persistSubagentState(conversationId, subagentState) {
         if (this.isSubagentRuntime)
@@ -3109,16 +3235,55 @@ class Agent {
         return child.queueActiveKernelMessage(`${marker}\n${message.body}`, 'steer', undefined, undefined, undefined, true);
     }
     deliverRootInboxMessage(message) {
+        if (this.acknowledgeSubagentSettlementReceipts().includes(message.id))
+            return true;
         const marker = `[Root subagent inbox id=${message.id} ${message.kind} from ${message.fromAgentId}]`;
         const prompt = `${marker}\n${message.body}\n\nReview this persisted peer result and summarize or continue the parent task as needed.`;
+        // Stay in the already active kernel so hosted mailbox delivery shares the
+        // same initialized system/tools instead of creating one Build per message.
+        if (this.directRootInboxQueuedIds.has(message.id))
+            return true;
+        if (this.queueActiveKernelMessage(prompt, 'followUp', undefined, undefined, undefined, true)) {
+            this.directRootInboxQueuedIds.add(message.id);
+            return true;
+        }
         for (const sub of this.rootInboxWakeSubscribers) {
             try {
-                if (sub(prompt))
+                if (sub(prompt, { wakeup: message.wakeup !== false }))
                     return true;
             }
             catch { /* ignore subscriber errors */ }
         }
-        return this.queueActiveKernelMessage(prompt, 'followUp', undefined, undefined, undefined, true);
+        if (message.wakeup !== false && !this.rootInboxWakeSubscribers.length && !this.activeProcessSignal()
+            && !this.subagents.isSchedulingPaused() && this.subagents.ownsExecutionBinding(this.rootInboxListener)
+            && !this.directRootWakePending) {
+            this.directRootWakePending = true;
+            queueMicrotask(() => {
+                this.directRootWakePending = false;
+                if (this.rootInboxWakeSubscribers.length || this.activeProcessSignal() || this.subagents.isSchedulingPaused()
+                    || !this.subagents.ownsExecutionBinding(this.rootInboxListener))
+                    return;
+                const next = this.subagents.readRootInbox().find(item => item.wakeup !== false);
+                if (!next)
+                    return;
+                const text = `[Root subagent inbox id=${next.id} ${next.kind} from ${next.fromAgentId}]\n${next.body}`;
+                void this.process({ text, hiddenUserInput: true }).catch(error => {
+                    this.recordWorkStatus(`Subagent mailbox wake failed: ${error instanceof Error ? error.message : String(error)}`);
+                });
+            });
+        }
+        return false;
+    }
+    /** A normal activation consumes queued mail without changing its static request prefix. */
+    flushDirectRootInbox() {
+        if (this.isSubagentRuntime || this.rootInboxWakeSubscribers.length)
+            return;
+        for (const message of this.subagents.readRootInbox()) {
+            const marker = `[Root subagent inbox id=${message.id} `;
+            if (this.history.some(item => item.role === 'user' && String(item.content || '').startsWith(marker)))
+                continue;
+            this.deliverRootInboxMessage(message);
+        }
     }
     deliverPeerSettlement(record) {
         const target = record.createdByAgentId === record.id ? this.subagents.rootAgentId : record.createdByAgentId;
@@ -3129,7 +3294,7 @@ class Agent {
             if (delivery.ok)
                 return;
         }
-        this.subagents.sendRootMessage(record.id, body, 'result');
+        this.subagents.sendRootMessage(record.id, body, 'result', record.settlementRevision);
     }
     recordsForState(state) {
         if (!state)
@@ -3187,7 +3352,8 @@ class Agent {
         // windows on demand ("load earlier messages").
         const windowSize = Math.max(1, Math.floor(Number(options.window) || 0) || 200);
         const totalMessages = fullChatMessages.length;
-        const before = Math.max(0, Math.floor(Number(options.before) || 0) || totalMessages);
+        const before = options.before == null ? totalMessages
+            : Math.min(totalMessages, Math.max(0, Math.floor(Number(options.before) || 0)));
         const windowStart = Math.max(0, before - windowSize);
         const chatMessages = fullChatMessages.slice(windowStart, before);
         const workRuns = this.normalizeWorkRuns(isActiveConversation && viewingRuntimeNode ? this.workRuns : (viewedNode?.workRuns || persisted?.workRuns || memory?.workRuns));
@@ -3267,7 +3433,7 @@ class Agent {
             branchIndexDirectory: { ...(tree.nodeIndex || {}) },
         };
     }
-    ensureConversationSnapshot(conversationId = this.activeConversationId) {
+    ensureConversationSnapshot(conversationId = this.activeConversationId, options = {}) {
         const clean = this.safeConversationId(conversationId || 'default');
         const stateKey = this.workspaceConversationStateKey(clean);
         if (stateKey) {
@@ -3296,7 +3462,7 @@ class Agent {
                 this.writeStoredConversationState(stored);
             }
         }
-        return this.getConversationSnapshot(clean);
+        return this.getConversationSnapshot(clean, options);
     }
     rewindConversation(conversationId, messageIndex) {
         const clean = this.safeConversationId(conversationId || 'default');
@@ -3732,24 +3898,71 @@ class Agent {
             'No preamble, no explanation, no Markdown, no quotes, no trailing punctuation.',
         ].join('\n');
         const prompt = `First user input:\n${String(firstUserInput || '').slice(0, 4000)}\n\nConversation title (a few words):`;
-        const controller = new AbortController();
-        const timer = setTimeout(() => controller.abort(new Error('conversation rename timed out')), 15000);
         try {
             if (signal?.aborted)
                 return '';
             const { temperature, reasoningEffort } = provider.intelligenceConfig(intelligence);
-            const generated = await provider.chat(modelName, [{ role: 'user', content: prompt }], system, temperature, 64, controller.signal, reasoningEffort);
+            // The title request uses the same transport policy and cancellation owner
+            // as the formal response. A healthy slow model must not be turned into
+            // five failed requests by an unrelated 15-second title deadline.
+            // Reasoning tokens share the completion budget. A 64-token cap can
+            // truncate even a short title and block every first conversation request.
+            const generated = await this.chatWithConversationUsage(provider, modelName, [{ role: 'user', content: prompt }], system, temperature, 2048, signal, reasoningEffort);
+            if (signal?.aborted)
+                return '';
             const title = this.normalizeConversationRenameTitle(generated);
             const source = String(firstUserInput || '').replace(/\s+/g, ' ').trim();
             return title && title !== source ? title : '';
         }
-        catch {
-            return '';
-        }
-        finally {
-            clearTimeout(timer);
+        catch (error) {
+            if (signal?.aborted)
+                return '';
+            throw error;
         }
     }
+    conversationTitleFailureCause(error, provider) {
+        const message = error instanceof Error ? error.message : '';
+        const status = message.match(/^\[LLM Error:\s*([1-5]\d{2})\]/)?.[1];
+        if (status) {
+            // Extract only a short machine code. Never display the provider's raw
+            // message/body, request URL, headers or echoed credentials in this gate.
+            let code = '';
+            try {
+                const json = JSON.parse(message.slice(message.indexOf('{')));
+                const candidate = typeof json.error?.code === 'string' ? json.error.code : '';
+                if (/^[a-z][a-z0-9_.-]{0,63}$/i.test(candidate)
+                    && !(provider.apiKey && candidate.includes(provider.apiKey))
+                    && !(provider.baseUrl && candidate.includes(provider.baseUrl)))
+                    code = candidate;
+            }
+            catch { /* Non-JSON errors still retain their safe HTTP status. */ }
+            const reason = code === 'get_channel_failed' ? 'no provider channel available' : {
+                '400': 'request rejected', '401': 'authentication failed', '402': 'payment required',
+                '403': 'access denied', '404': 'model or endpoint unavailable', '408': 'request timed out',
+                '429': 'rate limited', '500': 'provider internal error', '502': 'provider gateway error',
+                '503': 'service unavailable', '504': 'provider gateway timed out',
+            }[status] || 'provider request failed';
+            return `HTTP ${status}${code ? ` (${code})` : ''}: ${reason}`;
+        }
+        if (error instanceof Error && error.name === 'TimeoutError')
+            return 'provider request timed out';
+        if (error instanceof SyntaxError)
+            return 'provider returned invalid JSON';
+        return 'provider request failed';
+    }
+    async waitForConversationTitleRetry(delayMs, signal) {
+        if (signal?.aborted || delayMs <= 0)
+            return;
+        await new Promise(resolve => {
+            const finish = () => {
+                clearTimeout(timer);
+                signal?.removeEventListener('abort', finish);
+                resolve();
+            };
+            const timer = setTimeout(finish, delayMs);
+            signal?.addEventListener('abort', finish, { once: true });
+        });
+    }
     /** Legacy completion hook retained as a no-op; naming is pre-response only. */
     maybeAutoRenameConversationFromRun(_run) {
         // Compatibility no-op. Automatic naming is a hard gate on the first
@@ -3765,19 +3978,33 @@ class Agent {
         const retryDelaysMs = [0, 1000, 2000, 4000, 8000];
         if (!messageId || !firstUserInput.trim())
             return false;
+        // Failure state belongs to this title attempt sequence, not the Agent or
+        // another conversation. A later empty title replaces an earlier HTTP error.
+        let lastFailure = 'provider returned an empty or unusable title';
+        const requestTitle = async () => {
+            lastFailure = 'provider returned an empty or unusable title';
+            try {
+                return await this.deriveConversationTitleFromProvider(firstUserInput, provider, modelName, intelligence, signal);
+            }
+            catch (error) {
+                lastFailure = this.conversationTitleFailureCause(error, provider);
+                return '';
+            }
+        };
+        const exhaustedFailure = () => new Error(`Conversation title generation failed; ${lastFailure}. The first Agent request was not started. Retry the first input.`);
         if (!stateKey) {
             // Pure Agent/CLI mode has no workspace conversation file to rename, but
             // still uses the title request as the required first model-availability
             // probe before starting the formal response.
             for (let attempt = 0; attempt < maxAttempts; attempt += 1) {
-                if (await this.deriveConversationTitleFromProvider(firstUserInput, provider, modelName, intelligence, signal))
+                if (await requestTitle())
                     return true;
                 if (signal?.aborted)
                     return false;
                 if (attempt < maxAttempts - 1)
-                    await new Promise(resolve => setTimeout(resolve, retryDelaysMs[attempt]));
+                    await this.waitForConversationTitleRetry(retryDelaysMs[attempt], signal);
             }
-            return false;
+            throw exhaustedFailure();
         }
         const stored = this.readStoredConversationState(workspace);
         const entry = stored.conversations?.[stateKey];
@@ -3794,7 +4021,7 @@ class Agent {
         if (memory)
             memory.titleRequestMessageId = messageId;
         for (let attempt = 0; attempt < maxAttempts; attempt += 1) {
-            const title = await this.deriveConversationTitleFromProvider(firstUserInput, provider, modelName, intelligence, signal);
+            const title = await requestTitle();
             if (title) {
                 const latest = this.readStoredConversationState(workspace);
                 const current = latest.conversations?.[stateKey];
@@ -3812,9 +4039,9 @@ class Agent {
             if (signal?.aborted)
                 return false;
             if (attempt < maxAttempts - 1)
-                await new Promise(resolve => setTimeout(resolve, retryDelaysMs[attempt]));
+                await this.waitForConversationTitleRetry(retryDelaysMs[attempt], signal);
         }
-        return false;
+        throw exhaustedFailure();
     }
     firstPersistedUserForTitleGate() {
         const firstUser = this.chatMessages.find(message => message.role === 'user');
@@ -4008,8 +4235,16 @@ class Agent {
         };
     }
     saveWorkspaceConversationState(flush = true) {
-        if (this.isSubagentRuntime)
+        if (this.isSubagentRuntime) {
+            if (this.subagentContextPersist && (this.history.length !== this.subagentPersistedHistory.length
+                || this.lastCompression !== this.subagentPersistedCompression
+                || this.history.some((message, index) => message !== this.subagentPersistedHistory[index]))) {
+                this.subagentContextPersist(this.history, this.lastCompression);
+                this.subagentPersistedHistory = this.history.slice();
+                this.subagentPersistedCompression = this.lastCompression;
+            }
             return;
+        }
         const key = this.workspaceConversationKey();
         if (!key)
             return;
@@ -4018,6 +4253,7 @@ class Agent {
         this.workspaceConversations.set(key, {
             chatMessages: [...this.chatMessages],
             history: [...this.history],
+            providerUsage: this.conversationProviderUsage(),
             compressionCache: [...this.compressionCache],
             branchMailbox: [...this.branchMailbox],
             branchCommunication: this.branchCommunicationEnabled,
@@ -4053,6 +4289,7 @@ class Agent {
             title,
             chatMessages: [...this.chatMessages],
             history: [...this.history],
+            providerUsage: this.conversationProviderUsage(),
             compressionCache: [...this.compressionCache],
             branchMailbox: [...this.branchMailbox],
             branchCommunication: this.branchCommunicationEnabled,
@@ -4085,6 +4322,8 @@ class Agent {
     }
     loadWorkspaceConversationState() {
         this.managedWorkRunIds.clear();
+        this.pendingPublicWorkText.clear();
+        this.restoreProviderUsage();
         const key = this.workspaceConversationKey();
         this.loadedWorkspaceConversationKey = key || '';
         if (!key) {
@@ -4109,6 +4348,7 @@ class Agent {
         }
         const saved = this.workspaceConversations.get(key);
         if (saved) {
+            this.restoreProviderUsage(saved.providerUsage);
             this.history = [...saved.history];
             this.compressionCache = saved.compressionCache ? saved.compressionCache.map(entry => ({ ...entry, messages: [...entry.messages] })) : [];
             this.nextCompressionCacheId = Math.max(1, ...this.compressionCache.map(entry => Number(entry.id.replace(/^ctx-cache-/, '')) || 0)) + 1;
@@ -4136,6 +4376,7 @@ class Agent {
         const stored = this.readStoredConversationState();
         const stateKey = this.workspaceConversationStateKey();
         const persisted = stateKey && stored.conversations ? stored.conversations[stateKey] : null;
+        this.restoreProviderUsage(persisted?.providerUsage);
         const repairedHistory = this.repairDanglingToolCalls(persisted?.history ? [...persisted.history] : []);
         this.history = repairedHistory.messages;
         this.compressionCache = persisted?.compressionCache ? persisted.compressionCache.map(entry => ({ ...entry, messages: [...entry.messages] })) : [];
@@ -4182,6 +4423,7 @@ class Agent {
         this.workspaceConversations.set(key, {
             chatMessages: [...this.chatMessages],
             history: [...this.history],
+            providerUsage: this.conversationProviderUsage(),
             compressionCache: [...this.compressionCache],
             branchMailbox: [...this.branchMailbox],
             branchCommunication: this.branchCommunicationEnabled,
@@ -4232,10 +4474,12 @@ class Agent {
         return ws;
     }
     selectWorkspace(id) {
+        this.assertPeerOwnerCanSwitch(this.activeConversationId, id);
         this.saveWorkspaceConversationState();
         return this.applyWorkspaceContext(this.workspace.select(id));
     }
     selectWorkspaceFromStorage(id) {
+        this.assertPeerOwnerCanSwitch(this.activeConversationId, id);
         const selected = this.workspace.select(id);
         if (selected)
             this.config.loadWorkspaceConfig(selected.path);
@@ -4273,6 +4517,7 @@ class Agent {
     }
     setConversation(id) {
         const clean = this.safeConversationId(id || 'default');
+        this.assertPeerOwnerCanSwitch(clean);
         // Conversation runners may bind a target workspace directly before their
         // first setConversation(). Do not save state loaded for another workspace
         // under the new workspace key during that hand-off.
@@ -4285,6 +4530,7 @@ class Agent {
         return this.activeConversationId;
     }
     setConversationFromStorage(id) {
+        this.assertPeerOwnerCanSwitch(id);
         this.activeConversationId = this.safeConversationId(id || 'default');
         const key = this.workspaceConversationKey();
         if (key)
@@ -4294,6 +4540,8 @@ class Agent {
     }
     persistActiveConversationSelection(id, ws = this.workspace.current) {
         const clean = this.safeConversationId(id || 'default');
+        if (ws && this.workspace.current && path.resolve(ws.path) === path.resolve(this.workspace.current.path))
+            this.assertPeerOwnerCanSwitch(clean);
         this.mutateStoredConversationState(ws, latest => ({
             version: 3,
             activeConversationId: clean,
@@ -4319,6 +4567,9 @@ class Agent {
     }
     abortActiveKernelRun(reason = 'unspecified') {
         let aborted = false;
+        if (!this.isSubagentRuntime && (reason === 'user_stop' || reason === 'force_stop')) {
+            this.subagents.broadcastStop(this.runtimeActorId, this.currentWorkRunId() || this.routeTransactionId || 'inactive', reason === 'force_stop');
+        }
         this.subagents.pauseScheduling();
         if (this.activeProcessAbortController && !this.activeProcessAbortController.signal.aborted) {
             const abortError = new Error('Agent run aborted');
@@ -4339,6 +4590,7 @@ class Agent {
         this.pendingAgentKernelQueue = [];
         return aborted;
     }
+    hasRunningSubagents() { return this.activePeerAgents.size > 0; }
     activeProcessSignal() {
         return this.activeProcessAbortController?.signal;
     }
@@ -4575,7 +4827,7 @@ class Agent {
             ].join('\n');
             const maxTokens = Math.max(1024, Math.min(8192, Math.ceil(content.length / 4)) + 512);
             const { temperature } = provider.intelligenceConfig('low');
-            const generated = await this.withTimeout(provider.chat(modelName, [{ role: 'user', content: prompt }], system, temperature, maxTokens, signal), 120000);
+            const generated = await this.withTimeout(this.chatWithConversationUsage(provider, modelName, [{ role: 'user', content: prompt }], system, temperature, maxTokens, signal), 120000);
             const summary = String(generated || '').trim();
             if (!summary || /^\[LLM Error(?::|\])/i.test(summary)) {
                 return {
@@ -5423,6 +5675,11 @@ class Agent {
         const stored = this.readStoredConversationState(ws);
         stored.conversations = stored.conversations || {};
         const previous = stateKey ? stored.conversations[stateKey] : undefined;
+        const providerUsage = source.conversationProviderUsage ? source.conversationProviderUsage() : source.providerUsageTotals ? {
+            version: 1,
+            totals: this.normalizeProviderUsageCounters(source.providerUsageTotals),
+            last: this.normalizeProviderUsageCounters(source.lastProviderUsage),
+        } : previous?.providerUsage;
         const sourceTitleGate = source.getConversationTitleGateState?.() || source.titleGateState;
         const titleRequestMessageId = sourceTitleGate?.titleRequestMessageId === undefined
             ? String(previous?.titleRequestMessageId || '')
@@ -5434,6 +5691,7 @@ class Agent {
             this.workspaceConversations.set(key, {
                 chatMessages: normalizedChatMessages,
                 history: [...source.history],
+                providerUsage,
                 plan,
                 linkedPlan,
                 subagentState,
@@ -5459,6 +5717,7 @@ class Agent {
             title,
             chatMessages: normalizedChatMessages,
             history: [...source.history],
+            providerUsage,
             plan,
             linkedPlan,
             subagentState,
@@ -5481,6 +5740,7 @@ class Agent {
         if (this.safeConversationId(this.activeConversationId || 'default') === clean) {
             this.chatMessages = normalizedChatMessages;
             this.history = [...source.history];
+            this.restoreProviderUsage(providerUsage);
             this.conversationPlan = plan;
             this.linkedPlan = linkedPlan;
             if (source.subagents)
@@ -5728,22 +5988,143 @@ class Agent {
             buildBlockTokens: estimate(buildBlockAsciiChars, buildBlockNonAsciiChars, buildBlockStructuralChars, true),
         };
     }
-    recordProviderUsage(input) {
-        const bounded = (value) => Math.max(0, Math.floor(Number(value) || 0));
-        const usage = {
-            input: bounded(input.input),
-            output: bounded(input.output),
-            cacheRead: bounded(input.cacheRead),
-            cacheWrite: bounded(input.cacheWrite),
+    normalizeProviderUsageCounters(input) {
+        const bounded = (value) => typeof value === 'number' && Number.isFinite(value)
+            ? Math.max(0, Math.floor(value)) : 0;
+        return { input: bounded(input?.input), output: bounded(input?.output), cacheRead: bounded(input?.cacheRead), cacheWrite: bounded(input?.cacheWrite) };
+    }
+    conversationProviderUsage() {
+        return {
+            version: 1, totals: { ...this.providerUsageTotals }, last: { ...this.lastProviderUsage },
+            accounting: { ...this.providerUsageAccounting },
+            requestContext: this.lastRequestContext ? { ...this.lastRequestContext } : null,
+        };
+    }
+    normalizedConversationUsage(saved) {
+        const totals = this.normalizeProviderUsageCounters(saved?.version === 1 ? saved.totals : undefined);
+        const accounting = (0, providerUsageAccounting_1.createAccounting)(saved?.version === 1 ? totals : undefined);
+        if (saved?.version === 1 && saved.accounting) {
+            for (const key of ['requests', 'inputReportedRequests', 'outputReportedRequests', 'cacheReportedRequests', 'cacheEligibleInputTokens', 'cacheReadTokens']) {
+                const value = saved.accounting[key];
+                accounting[key] = typeof value === 'number' && Number.isFinite(value) ? Math.max(0, Math.floor(value)) : 0;
+            }
+            accounting.hasLegacyTotals = saved.accounting.hasLegacyTotals === true;
+            accounting.lastInputTokens = typeof saved.accounting.lastInputTokens === 'number' && Number.isFinite(saved.accounting.lastInputTokens)
+                ? Math.max(0, Math.floor(saved.accounting.lastInputTokens)) : null;
+        }
+        let requestContext = null;
+        const context = saved?.version === 1 ? saved.requestContext : null;
+        if (context && typeof context.requestId === 'string' && typeof context.runId === 'string' && typeof context.at === 'string') {
+            requestContext = { requestId: context.requestId, runId: context.runId, model: String(context.model || ''), at: context.at,
+                estimatedTokens: 0, longHistoryTokens: 0, buildBlockTokens: 0, systemPromptTokens: 0, toolSchemaTokens: 0, messageCount: 0, hasImages: context.hasImages === true };
+            for (const key of ['estimatedTokens', 'longHistoryTokens', 'buildBlockTokens', 'systemPromptTokens', 'toolSchemaTokens', 'messageCount', 'inputTokens', 'cacheReadTokens']) {
+                const value = context[key];
+                if (typeof value === 'number' && Number.isFinite(value))
+                    requestContext[key] = Math.max(0, Math.floor(value));
+            }
+        }
+        return { version: 1, totals, last: this.normalizeProviderUsageCounters(saved?.version === 1 ? saved.last : undefined), accounting, requestContext };
+    }
+    restoreProviderUsage(saved) {
+        // Legacy counters remain spend evidence, but cannot prove reporting coverage.
+        const usage = this.normalizedConversationUsage(saved);
+        this.providerUsageTotals = usage.totals;
+        this.lastProviderUsage = usage.last;
+        this.providerUsageAccounting = usage.accounting;
+        this.lastRequestContext = usage.requestContext || null;
+    }
+    mutateRequestUsage(request, mutate) {
+        const activeKey = this.workspaceConversationStateKey();
+        if (request.stateKey === activeKey && request.conversationId === this.activeConversationId) {
+            const usage = { version: 1, totals: this.providerUsageTotals, last: this.lastProviderUsage,
+                accounting: this.providerUsageAccounting, requestContext: this.lastRequestContext };
+            mutate(usage);
+            this.lastProviderUsage = usage.last;
+            this.lastRequestContext = usage.requestContext || null;
+            this.saveWorkspaceConversationState(false);
+            return;
+        }
+        // A late auxiliary response belongs to the captured target, not whichever
+        // conversation the user selected while it was running. Do not revive deletion.
+        if (!request.workspace || !request.stateKey)
+            return;
+        this.mutateStoredConversationState(request.workspace, stored => {
+            const entry = stored.conversations?.[request.stateKey];
+            if (!entry)
+                return stored;
+            const usage = this.normalizedConversationUsage(entry.providerUsage);
+            mutate(usage);
+            entry.providerUsage = usage;
+            entry.updatedAt = new Date(Math.max(Date.now(), (Date.parse(entry.updatedAt || '') || 0) + 1)).toISOString();
+            // A different active conversation can already have a debounced snapshot
+            // of this same store. Update only this entry's usage in that snapshot so
+            // its later flush cannot roll back the late measurement or discard B.
+            const storePath = this.workspaceConversationStorePath(request.workspace);
+            const dirtyEntry = storePath ? this.conversationStateDirty.get(storePath)?.state.conversations?.[request.stateKey] : undefined;
+            if (dirtyEntry)
+                dirtyEntry.providerUsage = structuredClone(usage);
+            const memoryKey = `${request.workspace.isInternal ? 'internal' : 'external'}:${path.resolve(request.workspace.path)}::conversation:${request.conversationId}`;
+            const memory = this.workspaceConversations.get(memoryKey);
+            if (memory) {
+                memory.providerUsage = structuredClone(usage);
+                memory.updatedAt = entry.updatedAt;
+            }
+            return stored;
+        });
+    }
+    beginProviderUsageRequest() {
+        const request = {
+            id: crypto.randomUUID(), conversationId: this.activeConversationId,
+            workspace: this.workspace.current ? { ...this.workspace.current } : null,
+            stateKey: this.workspaceConversationStateKey(),
+            accounting: (0, providerUsageAccounting_1.beginAccountingRequest)((0, providerUsageAccounting_1.createAccounting)()),
         };
-        this.lastProviderUsage = usage;
-        this.providerUsageTotals.input += usage.input;
-        this.providerUsageTotals.output += usage.output;
-        this.providerUsageTotals.cacheRead += usage.cacheRead;
-        this.providerUsageTotals.cacheWrite += usage.cacheWrite;
+        this.mutateRequestUsage(request, usage => { request.accounting = (0, providerUsageAccounting_1.beginAccountingRequest)(usage.accounting); });
+        return request;
+    }
+    recordRequestContext(request, messages, system, tools, model) {
+        const context = {
+            ...(0, requestContextEstimate_1.estimateSubmittedContext)(messages, system, tools, this.compressionBuildBlockStart(messages)),
+            requestId: request.id, runId: this.currentWorkRunId(), model, at: new Date().toISOString(),
+        };
+        this.mutateRequestUsage(request, usage => { usage.requestContext = context; });
+    }
+    recordProviderUsage(input, request = this.beginProviderUsageRequest()) {
+        this.mutateRequestUsage(request, usage => {
+            (0, providerUsageAccounting_1.applyAccountingUsage)(usage.accounting, usage.totals, request.accounting, input);
+            usage.last = { ...request.accounting.usage };
+            if (usage.requestContext?.requestId === request.id) {
+                if (request.accounting.reported.input)
+                    usage.requestContext.inputTokens = request.accounting.usage.input;
+                if (request.accounting.reported.cacheRead)
+                    usage.requestContext.cacheReadTokens = request.accounting.usage.cacheRead;
+            }
+        });
+    }
+    async chatWithConversationUsage(provider, ...args) {
+        // Bind before awaiting. The callback runs for successful responses even if
+        // usage is absent; failed HTTP/model-probe requests are not invented spend.
+        const workspace = this.workspace.current ? { ...this.workspace.current } : null;
+        const conversationId = this.activeConversationId;
+        const stateKey = this.workspaceConversationStateKey();
+        let request;
+        const callback = args[7];
+        args[7] = input => {
+            if (!request) {
+                request = { id: crypto.randomUUID(), workspace, conversationId, stateKey, accounting: (0, providerUsageAccounting_1.beginAccountingRequest)((0, providerUsageAccounting_1.createAccounting)()) };
+                this.mutateRequestUsage(request, usage => { request.accounting = (0, providerUsageAccounting_1.beginAccountingRequest)(usage.accounting); });
+            }
+            this.recordProviderUsage(input, request);
+            callback?.(input);
+        };
+        return provider.chat(...args);
     }
     contextWindow(modelName = this.model) {
-        const estimatedTokens = this.estimateContextTokens();
+        const activeRequest = this.activeAgentKernelRuntime && this.lastRequestContext?.runId === this.currentWorkRunId()
+            ? this.lastRequestContext : null;
+        const historyEstimate = activeRequest ? null
+            : (0, requestContextEstimate_1.estimateSubmittedContext)(this.history, '', [], this.compressionBuildBlockStart(this.history));
+        const estimatedTokens = activeRequest?.estimatedTokens ?? historyEstimate.estimatedTokens;
         // Display and compression must share one window resolution. Both resolve
         // the auto branch through the active (routed) deployment so the UI ring and
         // the compaction trigger stay on the same maxTokens even after an Auto
@@ -5753,14 +6134,15 @@ class Agent {
         const maxTokens = Math.max(1, Number(model?.max_tokens || 0) || 128000);
         const ratio = estimatedTokens / maxTokens;
         const budget = this.compressionBudget(this.history, modelName);
+        const cache = (0, providerUsageAccounting_1.ratioSummary)(this.providerUsageAccounting);
         return {
             estimatedTokens,
             maxTokens,
             ratio,
             warning: ratio >= 1 ? 'over_limit' : ratio >= 0.85 ? 'near_limit' : 'ok',
             model: modelName,
-            buildBlockTokens: budget.buildBlockTokens,
-            longHistoryTokens: budget.longHistoryTokens,
+            buildBlockTokens: activeRequest?.buildBlockTokens ?? historyEstimate.buildBlockTokens,
+            longHistoryTokens: activeRequest?.longHistoryTokens ?? historyEstimate.longHistoryTokens,
             buildBlockTriggerTokens: budget.buildBlockTriggerTokens,
             longHistoryTriggerTokens: budget.longHistoryTriggerTokens,
             buildBlockRetentionTokens: budget.buildBlockRetentionTokens,
@@ -5775,9 +6157,20 @@ class Agent {
             providerOutputTokens: this.providerUsageTotals.output,
             providerCacheReadTokens: this.providerUsageTotals.cacheRead,
             providerCacheWriteTokens: this.providerUsageTotals.cacheWrite,
-            providerCacheReadRatio: this.providerUsageTotals.input > 0
-                ? Math.min(1, this.providerUsageTotals.cacheRead / this.providerUsageTotals.input)
-                : 0,
+            providerCacheReadRatio: cache.totalRatio,
+            providerKnownCacheReadRatio: cache.knownRatio,
+            providerCacheEligibleInputTokens: cache.denominator,
+            providerUsageRequests: this.providerUsageAccounting.requests,
+            providerUsageInputReportedRequests: this.providerUsageAccounting.inputReportedRequests,
+            providerUsageOutputReportedRequests: this.providerUsageAccounting.outputReportedRequests,
+            providerUsageCacheReportedRequests: this.providerUsageAccounting.cacheReportedRequests,
+            providerUsageHasLegacyTotals: this.providerUsageAccounting.hasLegacyTotals,
+            providerLastInputTokens: this.providerUsageAccounting.lastInputTokens,
+            requestContext: this.lastRequestContext ? { ...this.lastRequestContext } : null,
+            contextEstimateSource: activeRequest ? 'active_request' : 'history',
+            contextEstimateHasImages: activeRequest?.hasImages ?? historyEstimate.hasImages,
+            systemPromptTokens: activeRequest?.systemPromptTokens ?? 0,
+            toolSchemaTokens: activeRequest?.toolSchemaTokens ?? 0,
         };
     }
     resolveWindowModel(modelName) {
@@ -5827,16 +6220,17 @@ class Agent {
     }
     compressionBuildBlockStart(messages) {
         const activeRunId = this.currentWorkRunId();
+        // No active Build means every retained message is historical, including
+        // legacy assistant/tool tails whose old persistence omitted run metadata.
+        if (!activeRunId)
+            return messages.length;
         if (activeRunId) {
             const index = messages.findIndex(message => String(message.run_id || message.runId || '') === activeRunId);
             if (index >= 0)
                 return index;
         }
-        // dev-0.5.6: 空闲对话（无活动 run）时不得把全部历史算进当前 Build Block，
-        // 否则上下文显示窗口的长期历史恒为 0。回退语义：
-        // - 存在带 run_id 的消息：boundary 取最后一个 run 的起点之后（该 run 及其
-        //   之前的历史属于长期历史，其后无归属的消息属于当前未命名区块）；
-        // - 完全没有 run_id：全部历史都是长期历史（不存在当前 Build Block）。
+        // Legacy active transcripts may lack the current run tag. Retain the
+        // historical tagged prefix; ordinary new inputs now carry their run_id.
         let lastRunBoundary = -1;
         for (let index = 0; index < messages.length; index += 1) {
             if (String(messages[index]?.run_id || messages[index]?.runId || ''))
@@ -6189,6 +6583,7 @@ class Agent {
             title: this.titleFromMessages(messages, clean),
             chatMessages: messages,
             history: sourceHistory,
+            providerUsage: memory?.providerUsage,
             plan: memory?.plan,
             linkedPlan: memory?.linkedPlan,
             subagentState: memory?.subagentState,
@@ -6286,6 +6681,7 @@ class Agent {
             title: this.titleFromMessages(messages, clean),
             chatMessages: messages,
             history: sourceHistory,
+            providerUsage: memory?.providerUsage,
             plan: memory?.plan,
             linkedPlan: memory?.linkedPlan,
             subagentState: memory?.subagentState,
@@ -6702,7 +7098,7 @@ class Agent {
                 preference: Number.isFinite(Number(routeMetadata.route_preference)) ? Number(routeMetadata.route_preference) : undefined,
                 fallbackOnly: !!model.fallback_only,
             };
-        }).filter(candidate => !this.isBalanceBlockedDeployment(candidate.deployment));
+        });
     }
     persistRouteDecision(decision) {
         try {
@@ -6749,15 +7145,11 @@ class Agent {
         catch { }
     }
     allModelNames() {
-        const names = this.config.allModels().filter(m => {
-            const status = String(m.evaluation?.status || 'unvalidated');
-            const validationStatus = m.validation?.status;
-            return status === 'available' || status === 'unvalidated' || validationStatus === 'verified' || validationStatus === 'degraded';
-        }).map(m => {
+        const names = this.config.allModels().filter(m => m.enabled !== false).map(m => {
             const label = m.display || m.name;
             return `${m.provider} / ${label}`;
         });
-        return this.config.autoSwitchEnabled() && this.config.allModels().length > 0 ? ['auto', ...names] : names;
+        return this.config.autoSwitchEnabled() && names.length > 0 ? ['auto', ...names] : names;
     }
     async evaluateAndSwitch(task, override = undefined) {
         if (!this.config.autoSwitchEnabled() || this.model !== 'auto')
@@ -6847,39 +7239,22 @@ class Agent {
         return !!this.resolvedDeployment && before !== deploymentIdentity(this.resolvedDeployment);
     }
     shouldExposeToolInterface() {
-        // Fixed selections and pre-Standard legacy configurations keep the
-        // historical behavior. Auto can safely suppress schemas because its
-        // eligible deployments have explicit Standard/Extended evidence.
-        if (this.model !== 'auto')
-            return true;
-        const model = this.activeModelConfig();
-        if (!model)
-            return false;
-        const validation = model.validation;
-        if (validation?.level !== 'standard' && validation?.level !== 'extended')
-            return true;
-        return validation.capabilities?.tool_use === true || validation.capabilities?.tools === true;
+        return true;
     }
     modelIsUnavailable(modelName) {
         const model = modelName === this.model || modelName === 'auto'
-            ? this.activeModelConfig()
-            : this.config.findModel(modelName);
-        if (!model)
-            return true;
-        const validationStatus = effectiveModelValidationStatus(model);
-        // `discovered` means unvalidated, not a failed endpoint. Explicit fixed
-        // selections remain usable for backwards compatibility; only an executed
-        // Basic/Standard/Extended validation may pre-emptively mark them bad.
-        if (model.validation?.level !== 'discovered'
-            && (validationStatus === 'unavailable' || validationStatus === 'auth_error' || validationStatus === 'invalid_config'))
-            return true;
-        const status = validationStatus === 'degraded' ? 'degraded' : String(model?.evaluation?.status || '').toLowerCase();
-        return status === 'unavailable' || status.startsWith('error');
+            ? this.activeModelConfig() : (parseDeploymentSelectionValue(modelName) ? this.config.findDeployment(parseDeploymentSelectionValue(modelName)) : this.config.findModel(modelName));
+        // Only configuration/user switches can prevent a request. Response and
+        // validation observations are labels, never permission to disable a model.
+        return !model || model.enabled === false;
     }
+    failedDeploymentsThisRun = new Set();
     switchToFallbackModel(errorText = 'transport failure') {
         const fallbackEnabled = this.config.getBool('models', 'fallback_on_unavailable');
         const observedFailure = (0, autoRouter_1.classifyRouteFailure)(errorText);
         const observedDeployment = this.activeDeployment();
+        if (observedDeployment)
+            this.failedDeploymentsThisRun.add(deploymentIdentity(observedDeployment));
         // Keep balance exhaustion scoped to the deployment that actually failed.
         // Provider adapters normally record this before returning an error, but
         // fallback callers are also a public recovery boundary and must not rely
@@ -6951,7 +7326,7 @@ class Agent {
             || deploymentIdentity(this.deploymentRef(m)) !== deploymentIdentity(currentDeployment));
         if (!all.length)
             return null;
-        const usable = all.filter(m => !this.isBalanceBlockedDeployment(this.deploymentRef(m)) && !modelConfigIsUnavailable(m));
+        const usable = all.filter(m => !modelConfigIsUnavailable(m) && !this.failedDeploymentsThisRun.has(deploymentIdentity(this.deploymentRef(m))));
         if (!usable.length)
             return null;
         const pref = this.config.autoSwitchPreference();
@@ -7183,8 +7558,8 @@ class Agent {
     /**
      * Final visual safety net: OCR each submitted image and ask a text-only
      * request to conservatively repair the OCR. This is intentionally callable
-     * only after a visual-input refusal and after same-provider vision routing
-     * has been exhausted; the original image is never sent again.
+     * only after a real visual-input refusal. Cached capabilities never bypass
+     * the initial image request, and OCR does not disable later image attempts.
      */
     async finalVisualFallback(errorText, signal) {
         if (!/(?:vision|image|multimodal|image_url|input_image).*(?:not supported|unsupported|拒绝|不支持|failed|failure|invalid)|(?:not supported|unsupported|拒绝|不支持).*(?:vision|image|multimodal|image_url|input_image)/i.test(String(errorText || '')))
@@ -7192,11 +7567,6 @@ class Agent {
         const current = this.activeModelConfig();
         if (!current)
             return null;
-        const alternateVision = this.config.allModels().some(model => model.enabled !== false && model.provider_id === current.provider_id &&
-            model.name !== current.name && !!model.vision && !!model.api_key && !!model.provider_url &&
-            !['unavailable', 'auth_error', 'invalid_config'].includes(String(model.evaluation?.status || model.validation?.status || '').toLowerCase()));
-        if (alternateVision)
-            return null;
         const latest = [...this.history].reverse().find(item => item?.role === 'user');
         const parts = latest?.content && Array.isArray(latest.content) ? latest.content : [];
         const images = parts.map(part => {
@@ -7212,41 +7582,91 @@ class Agent {
                 if (result.ok && result.text.trim())
                     ocr.push({ index: index + 1, text: result.text.slice(0, 50_000), confidence: result.confidence });
             }
-            catch { }
+            catch (error) {
+                if (signal?.aborted)
+                    throw error;
+            }
         }
+        if (signal?.aborted)
+            throw signal.reason || new Error('Aborted');
         if (!ocr.length)
             return JSON.stringify({ ok: false, fallback: 'mini_ocr_llm', error: 'Local OCR returned no readable text; no visual content was fabricated.' });
-        const task = typeof latest?.content === 'string' ? latest.content : '';
+        const task = typeof latest?.content === 'string' ? latest.content : parts.filter(part => part.type === 'text').map(part => String(part.text || '')).join('\n');
         const evidence = ocr.map(item => `Image ${item.index} (OCR confidence ${item.confidence.toFixed(1)}):\n${item.text}`).join('\n\n');
         const prompt = `The provider rejected image input. Answer the user's task using only this approximate OCR evidence. Correct obvious character, spacing, and line-break errors only when supported by context. Preserve [uncertain] markers for ambiguity and never invent missing visual content.\nUser task:\n${task.slice(0, 12_000)}\nOCR evidence:\n${evidence}`;
         let corrected = '';
         try {
             const provider = this.engineModel();
             if (provider)
-                corrected = String(await provider.chat(this.activeModelName(), [{ role: 'user', content: prompt }], 'You are a text-only OCR correction assistant. Be conservative and explicit about uncertainty.', 0.05, 3000, signal) || '').trim();
+                corrected = String(await this.chatWithConversationUsage(provider, this.activeModelName(), [{ role: 'user', content: prompt }], 'You are a text-only OCR correction assistant. Be conservative and explicit about uncertainty.', 0.05, 3000, signal) || '').trim();
+        }
+        catch (error) {
+            if (signal?.aborted)
+                throw error;
         }
-        catch { }
         return JSON.stringify({
             ok: !!(corrected || ocr.length),
             fallback: 'mini_ocr_llm',
             approximate: true,
-            warning: '视觉输入被拒绝；以下内容来自本地 OCR，并经文本模型保守校正，可能不完整。',
+            warning: corrected ? '视觉输入被拒绝；以下内容来自本地 OCR，并经文本模型保守校正，可能不完整。' : '视觉输入被拒绝，文本校正请求也未成功；以下为未经校正的本地 OCR 结果，可能不完整。',
             raw_ocr: ocr,
             corrected: corrected || ocr.map(item => item.text).join('\n\n'),
             uncertainty: corrected ? 'preserved' : 'raw_ocr_only',
         }, null, 2);
     }
-    engineModel() {
+    engineModel(cache) {
         if (this.forcedProvider) {
             const active = this.activeDeployment();
             if (!this.forcedProviderDeployment
-                || (active && deploymentIdentity(active) === this.forcedProviderDeployment))
+                || (active && deploymentIdentity(active) === this.forcedProviderDeployment)) {
+                if (cache) {
+                    delete cache.key;
+                    delete cache.provider;
+                }
                 return this.forcedProvider;
+            }
         }
         const m = this.activeModelConfig();
-        if (!m)
+        if (!m) {
+            if (cache) {
+                delete cache.key;
+                delete cache.provider;
+            }
             return null;
-        return new provider_1.LLMProvider(m.provider, m.provider_url, m.api_key, m.provider_protocol, this.config.openAIApiMode(), this.config.contextFlag('provider_adapters_v2'), undefined, this.modelThinkingTierMaps(m), this.providerProxyConfig());
+        }
+        return this.modelProvider(m, cache);
+    }
+    modelProvider(m, cache) {
+        const apiMode = this.config.openAIApiMode();
+        const adapters = this.config.contextFlag('provider_adapters_v2');
+        const thinkingMaps = this.modelThinkingTierMaps(m);
+        const proxy = this.providerProxyConfig();
+        const create = () => (0, modelResponseHealth_1.observeModelResponses)(new provider_1.LLMProvider(m.provider, m.provider_url, m.api_key, m.provider_protocol, apiMode, adapters, undefined, thinkingMaps, proxy), updates => (0, modelResponseHealth_1.recordModelResponseHealth)(this.config.rootPath, {
+            providerId: m.provider_id, modelId: m.name, endpoint: m.provider_url, protocol: m.provider_protocol, credential: m.api_key,
+        }, updates));
+        if (!cache)
+            return create();
+        // Match the provider's configured-proxy/environment precedence. A changed
+        // effective proxy must not reuse a dispatcher created for its predecessor.
+        const effectiveProxyUrl = proxy.enabled === false ? '' : (proxy.url.trim()
+            || process.env.HTTPS_PROXY || process.env.HTTP_PROXY
+            || process.env.https_proxy || process.env.http_proxy || '');
+        const orderedMaps = Object.keys(thinkingMaps || {}).sort().map(model => [
+            model,
+            Object.keys(thinkingMaps[model]).sort().map(tier => [tier, thinkingMaps[model][tier]]),
+        ]);
+        const key = crypto.createHash('sha256').update(JSON.stringify([
+            m.provider_id, m.name, m.logical_model_group_id || '',
+            m.provider, m.provider_url, m.api_key, m.provider_protocol,
+            apiMode, adapters, orderedMaps,
+            proxy.enabled, proxy.url, proxy.auth, effectiveProxyUrl,
+        ])).digest('hex');
+        if (cache.key === key && cache.provider)
+            return cache.provider;
+        const provider = create();
+        cache.key = key;
+        cache.provider = provider;
+        return provider;
     }
     /**
      * dev-0.4.3 模型原生思考强度档位映射表（模型名 → thinking_tier_map）。
@@ -7540,6 +7960,7 @@ class Agent {
             return [{ type: 'text', text: '[Workspace required] Select or create a workspace before starting a conversation.' }];
         }
         if (this.processDepth === 0) {
+            this.failedDeploymentsThisRun.clear();
             this.processingConversationId = this.activeConversationId || 'default';
             this.activeProcessAbortController = new AbortController();
             this.subagents.resumeScheduling();
@@ -7558,27 +7979,6 @@ class Agent {
         this.fileDiffs = [];
         this.pendingOptions = [];
         try {
-            if (this.model === 'auto') {
-                // Auto routing re-resolves each turn; drop a stale blocked deployment
-                // so the router can pick an unblocked candidate instead of failing here.
-                if (this.resolvedDeployment && this.isBalanceBlockedDeployment(this.resolvedDeployment)) {
-                    this.resolvedDeployment = null;
-                    this.lastRouteDecision = null;
-                    this.pendingAutoAttempts = [];
-                }
-            }
-            else {
-                const blockedMs = this.balanceBlockedMs();
-                if (blockedMs > 0) {
-                    const waitSeconds = Math.max(1, Math.ceil(blockedMs / 1000));
-                    const deployment = this.activeDeployment();
-                    const label = deployment ? `${deployment.providerId}/${deployment.modelId}` : this.model;
-                    const message = `Provider balance exhausted (HTTP 402) for ${label}. Requests on this deployment are paused for ${waitSeconds}s; switch provider or model to continue immediately.`;
-                    this.status = 'error';
-                    this.emitWorkEvent({ type: 'error', content: message });
-                    throw new Error(message);
-                }
-            }
             let text = typeof input === 'string' ? input : String(input.text || '');
             const inputEnvelope = typeof input === 'string' ? null : input;
             let hiddenUserInput = inputEnvelope?.hiddenUserInput === true;
@@ -7586,6 +7986,7 @@ class Agent {
             if (!explicitFixedModel)
                 this.ensureUsableModelSelection();
             let clientMessageId = String(inputEnvelope?.clientMessageId || '').trim();
+            const userMessageId = String(inputEnvelope?.userMessageId || '').trim();
             const inputRunId = String(inputEnvelope?.runId || this.activeWorkRunId || '').trim();
             let rawImages = typeof input === 'string' ? [] : (Array.isArray(input.images) ? input.images : []);
             // dev-0.4.3 Guide 批量续接：同一 Build block 内连续到达的多个 Guide
@@ -7674,16 +8075,6 @@ class Agent {
                 await this.evaluateAndSwitch(`${text}\n[image attachment]`, inputEnvelope?.routePolicy);
                 autoRouteEvaluated = true;
             }
-            const selectedModel = this.activeModelConfig();
-            if (images.length && !selectedModel?.vision) {
-                // Give the normal route planner first chance to select another
-                // same-provider vision deployment. If none is available, the kernel
-                // preflight invokes the final mini-OCR + text-only correction path.
-                const hasSameProviderVision = selectedModel && this.config.allModels().some(model => model.enabled !== false && model.provider_id === selectedModel.provider_id &&
-                    model.name !== selectedModel.name && !!model.vision);
-                if (hasSameProviderVision)
-                    this.switchToFallbackModel('vision input not supported by the selected model');
-            }
             const now = this.nowLabel();
             const visibleUserInput = inputEnvelope?.visibleUserInput === undefined
                 ? text
@@ -7692,7 +8083,7 @@ class Agent {
             const historyContent = images.length
                 ? [{ type: 'text', text }, ...images.map(image => ({ type: 'image_url', image_url: { url: image.dataUrl } }))]
                 : text;
-            if (clientMessageId) {
+            if (clientMessageId && !userMessageId) {
                 this.persistGuideMessage(clientMessageId, displayText, inputRunId, historyContent, attachments, String(inputEnvelope?.guideId || ''));
                 if (inputRunId) {
                     this.recordGuideReceipt({
@@ -7709,19 +8100,30 @@ class Agent {
                 }
             }
             else if (!hiddenUserInput) {
-                const messageId = crypto.randomUUID();
-                this.chatMessages.push({
+                const messageId = userMessageId || crypto.randomUUID();
+                const persistedUser = userMessageId ? this.chatMessages.find(message => message.role === 'user' && message.messageId === userMessageId) : undefined;
+                const userMessage = {
                     messageId,
                     branchNodeId: this.currentBranchNodeId(),
                     role: 'user',
                     content: displayText,
                     mode: String(inputEnvelope?.visibleMode || this.modeName()),
                     model: this.model,
-                    timestamp: now,
+                    timestamp: persistedUser?.timestamp || now,
                     attachments: attachments.length ? attachments : undefined,
                     runId: this.currentWorkRunId() || undefined,
-                });
-                this.history.push({ role: 'user', content: historyContent });
+                };
+                if (persistedUser)
+                    Object.assign(persistedUser, userMessage);
+                else
+                    this.chatMessages.push(userMessage);
+                const persistedHistory = userMessageId ? this.history.find(message => message.role === 'user' && message.user_message_id === userMessageId) : undefined;
+                if (persistedHistory) {
+                    persistedHistory.content = historyContent;
+                    persistedHistory.run_id = this.currentWorkRunId() || undefined;
+                }
+                else
+                    this.history.push({ role: 'user', content: historyContent, run_id: this.currentWorkRunId() || undefined, ...(userMessageId ? { user_message_id: userMessageId } : {}) });
             }
             else {
                 this.history.push({
@@ -7734,10 +8136,16 @@ class Agent {
             }
             if (!hiddenUserInput)
                 this.recordWorkRunPrimaryPrompt(displayText);
+            const submittedHistoryMessage = userMessageId
+                ? this.history.find(message => message.role === 'user' && message.user_message_id === userMessageId)
+                : this.history.at(-1);
+            const submittedChatMessage = userMessageId
+                ? this.chatMessages.find(message => message.role === 'user' && message.messageId === userMessageId)
+                : [...this.chatMessages].reverse().find(message => message.role === 'user');
             this.saveWorkspaceConversationState(true);
             let firstResponseGateMessageId = '';
             let firstResponseTitleInput = null;
-            if (!hiddenUserInput && !clientMessageId && !this.firstAgentResponseStarted) {
+            if (!hiddenUserInput && (!clientMessageId || !!userMessageId) && !this.firstAgentResponseStarted) {
                 const firstInput = this.firstPersistedUserForTitleGate();
                 if (!firstInput)
                     throw new Error('Conversation title generation failed; the first persisted user input is unavailable.');
@@ -7786,6 +8194,14 @@ class Agent {
             // Agent provider request.
             this.notifyAgentKernelUserMessageStart(text, clientMessageId || undefined);
             this.emitWorkEvent({ type: 'start', content: 'Preparing request.' });
+            // Standalone Agent runs acquire their run ID at start, after the title
+            // gate. Bind the captured input now, without moving or bypassing that gate.
+            const startedRunId = this.currentWorkRunId();
+            if (startedRunId && submittedHistoryMessage?.role === 'user')
+                submittedHistoryMessage.run_id = startedRunId;
+            if (startedRunId && !hiddenUserInput && submittedChatMessage)
+                submittedChatMessage.runId = startedRunId;
+            this.saveWorkspaceConversationState(false);
             // Use external opencode CLI engine
             if (this.engine === 'opencode') {
                 if (images.length)
@@ -7996,6 +8412,8 @@ class Agent {
         const accepted = await this.handleSubagentContinueEnvelope(args);
         if (!accepted.ok || !accepted.data?.id)
             return accepted.output;
+        if (!['queued', 'working'].includes(accepted.data.status))
+            return accepted.output;
         const settled = await this.waitForSubagentSettlement(accepted.data.id);
         return `${accepted.output}\n${settled?.result || settled?.error || ''}`.trim();
     }
@@ -8005,22 +8423,36 @@ class Agent {
     async handleSubagentContinueEnvelope(args) {
         try {
             const params = JSON.parse(args);
-            const name = params.name || params.id || '';
-            const prompt = params.message || params.prompt || '';
+            if (!params || typeof params !== 'object' || Array.isArray(params))
+                throw new Error('Arguments must be an object.');
+            if (params.wakeup !== undefined && typeof params.wakeup !== 'boolean')
+                throw new Error('wakeup must be a boolean.');
+            if (params.kind !== undefined && !['directive', 'question', 'result', 'handoff'].includes(params.kind))
+                throw new Error('Invalid message kind.');
+            const name = String(params.id || params.name || '').trim();
+            const selected = (0, subagentCommunication_1.selectSubagentCommunication)(this.history, params);
+            const wakeup = params.wakeup === true;
+            if (name === 'root' || name === this.subagents.rootAgentId) {
+                const delivery = this.subagents.sendRootMessage(this.runtimeActorId, selected.body, params.kind || 'result', undefined, wakeup);
+                return { ok: delivery.ok, output: delivery.ok
+                        ? `[Root mailbox message persisted] ${delivery.message?.id} wakeup=${wakeup}`
+                        : `[Subagent] ${delivery.error}`, error: delivery.error,
+                    metadata: { kind: 'subagent-send', wakeup, selection: selected.selection } };
+            }
             const sa = this.subagents.get(name);
             if (!sa)
                 return { ok: false, output: `[Subagent] Not found: ${name}`, error: `Not found: ${name}` };
-            if (!prompt)
-                return this.subagents.toToolResult(sa.id, '[Subagent] Prompt required.', false);
-            sa.messages.push({ role: 'user', content: String(prompt), hidden_user_input: true });
-            const delivery = this.subagents.sendMessage(this.runtimeActorId, sa.id, String(prompt), params.kind || 'directive', {
+            const delivery = this.subagents.sendMessage(this.runtimeActorId, sa.id, selected.body, params.kind || 'directive', {
                 correlationId: params.correlation_id,
                 replyTo: params.reply_to,
-            });
-            return this.subagents.toToolResult(sa.id, delivery.ok ? `[Subagent message persisted] ${delivery.message?.id}` : `[Subagent] ${delivery.error}`, delivery.ok);
+            }, wakeup);
+            const result = this.subagents.toToolResult(sa.id, delivery.ok ? `[Subagent message persisted] ${delivery.message?.id} wakeup=${wakeup}` : `[Subagent] ${delivery.error}`, delivery.ok);
+            result.metadata = { ...result.metadata, wakeup, selection: selected.selection };
+            return result;
         }
-        catch {
-            return { ok: false, output: '[Subagent] Invalid continue arguments.', error: 'Invalid continue arguments.' };
+        catch (error) {
+            const detail = error instanceof Error ? error.message : 'Invalid continue arguments.';
+            return { ok: false, output: `[Subagent] ${detail}`, error: detail };
         }
     }
     handleSubagentResult(args) {
@@ -8038,7 +8470,11 @@ class Agent {
             // assistant/user 消息即足以让主 Agent 判断上下文，完整历史按需走
             // subagent_read 的 max_chars 分页读取。
             const transcript = this.subagents.boundedResultTranscript(sa.id);
-            return this.subagents.toToolResult(sa.id, `get.subagent("${sa.name}", id="${sa.id}")\nStatus: ${sa.status}\nModel: ${sa.model}\nMode: ${sa.agentMode}\n\nResult:\n${sa.result || ''}\n\nRecent Conversation (bounded):\n${transcript}`, true);
+            const result = this.subagents.toToolResult(sa.id, `get.subagent("${sa.name}", id="${sa.id}")\nStatus: ${sa.status}\nModel: ${sa.model}\nMode: ${sa.agentMode}\n\nResult:\n${sa.result || ''}\n\nRecent Conversation (bounded):\n${transcript}`, true);
+            const receipt = this.subagentSettlementReceipt(sa.id);
+            if (receipt)
+                result.metadata = { ...result.metadata, settlementReceipt: receipt };
+            return result;
         }
         catch {
             return { ok: false, output: '[Subagent] Invalid result arguments.', error: 'Invalid result arguments.' };
@@ -8053,7 +8489,9 @@ class Agent {
             const read = this.subagents.read(this.runtimeActorId, target, Number(params.max_chars || 16000));
             if (!read.ok)
                 return { ok: false, output: `[Subagent] ${read.error}`, error: read.error, metadata: { kind: 'subagent-read' } };
-            return { ok: true, output: JSON.stringify(read.snapshot, null, 2), data: read.snapshot, metadata: { kind: 'subagent-read' } };
+            const peer = this.subagents.get(target);
+            const receipt = peer && read.snapshot?.peer.result === peer.result ? this.subagentSettlementReceipt(peer.id) : undefined;
+            return { ok: true, output: JSON.stringify(read.snapshot, null, 2), data: read.snapshot, metadata: { kind: 'subagent-read', ...(receipt ? { settlementReceipt: receipt } : {}) } };
         }
         catch {
             return { ok: false, output: '[Subagent] Invalid read arguments.', error: 'Invalid read arguments.' };
@@ -8065,7 +8503,7 @@ class Agent {
             status = String(JSON.parse(args || '{}').status || '');
         }
         catch { }
-        const subagents = this.subagents.listAll().filter(record => !status || record.status === status).map(record => this.subagents.toRecord(record.id));
+        const subagents = this.subagents.listSummaries(status);
         return { ok: true, output: JSON.stringify({ conversationId: this.activeConversationId, subagents }, null, 2), metadata: { kind: 'subagent-list' } };
     }
     handleSubagentClose(args) {
@@ -8082,6 +8520,8 @@ class Agent {
             if (actorId === this.subagents.rootAgentId)
                 this.activePeerAgents.get(sa.id)?.abortActiveKernelRun();
             const closed = this.subagents.close(sa.id, actorId);
+            if (closed)
+                this.peerProviderCaches.delete(sa.id);
             return this.subagents.toToolResult(sa.id, closed ? `[Subagent '${sa.name}' closed]` : '[Subagent] Close denied.', closed);
         }
         catch {
@@ -8395,7 +8835,7 @@ class Agent {
         }, null, 2);
         try {
             const cfg = provider.intelligenceConfig(this.intelligence);
-            const response = await this.withTimeout(provider.chat(this.activeModelName(), [{ role: 'user', content: prompt }], system, Math.min(cfg.temperature, 0.2), Math.min(cfg.maxTokens, 3000), signal), 120000);
+            const response = await this.withTimeout(this.chatWithConversationUsage(provider, this.activeModelName(), [{ role: 'user', content: prompt }], system, Math.min(cfg.temperature, 0.2), Math.min(cfg.maxTokens, 3000), signal), 120000);
             const parsed = this.extractMemoryLabJson(response);
             if (!parsed)
                 return deterministic;
@@ -8443,7 +8883,7 @@ class Agent {
         ].join('\n');
         try {
             const cfg = provider.intelligenceConfig(this.intelligence);
-            await this.withTimeout(provider.chat(this.activeModelName(), [{ role: 'user', content: JSON.stringify({ index: read.index }, null, 2) }], system, Math.min(cfg.temperature, 0.2), Math.min(cfg.maxTokens, 1200), signal), 120000);
+            await this.withTimeout(this.chatWithConversationUsage(provider, this.activeModelName(), [{ role: 'user', content: JSON.stringify({ index: read.index }, null, 2) }], system, Math.min(cfg.temperature, 0.2), Math.min(cfg.maxTokens, 1200), signal), 120000);
         }
         catch {
             throwIfAgentAborted(signal); /* deterministic reindex still runs */
@@ -8554,10 +8994,18 @@ class Agent {
         }
         const model = assignedModel?.name || (requestedModel === 'auto' ? this.activeModelName() : requestedModel);
         const activeModel = this.activeModelConfig();
-        const activeProvider = this.engineModel();
-        const assignedProvider = assignedModel && assignedModel.provider_id !== activeModel?.provider_id
-            ? new provider_1.LLMProvider(assignedModel.provider, assignedModel.provider_url, assignedModel.api_key, assignedModel.provider_protocol, this.config.openAIApiMode(), this.config.contextFlag('provider_adapters_v2'), undefined, this.modelThinkingTierMaps(assignedModel), this.providerProxyConfig())
-            : activeProvider;
+        const peerProviderCache = this.peerProviderCaches.get(id) || {};
+        this.peerProviderCaches.delete(id);
+        this.peerProviderCaches.set(id, peerProviderCache);
+        for (const retainedId of this.peerProviderCaches.keys()) {
+            if (this.peerProviderCaches.size <= 32)
+                break;
+            if (!this.activePeerAgents.has(retainedId) && retainedId !== id)
+                this.peerProviderCaches.delete(retainedId);
+        }
+        const assignedProvider = assignedModel && (assignedModel.provider_id !== activeModel?.provider_id || assignedModel.name !== activeModel?.name)
+            ? this.modelProvider(assignedModel, peerProviderCache)
+            : this.engineModel(peerProviderCache);
         if (!assignedProvider || !model) {
             throw new Error('No LLM configured. Add provider in Settings > Models.');
         }
@@ -8601,7 +9049,7 @@ class Agent {
             child.config.set('models', 'auto_switch', false);
             child.config.set('skills', 'auto_download', 'disabled');
             child.subagents = this.subagents;
-            child.subagentContextPersist = (history, compression) => this.subagents.replaceContext(sa.id, history, compression);
+            child.subagentContextPersist = (history, compression, inputCommitted) => this.subagents.replaceContext(sa.id, history, compression, inputCommitted);
             const requestedFlowName = String(flowName || sa.flowName || '').trim();
             if (sa.agentMode === 'flow' && requestedFlowName) {
                 const flowDir = path.join(this.rootPath, 'Flow');
@@ -8617,6 +9065,7 @@ class Agent {
                 && message.content.startsWith("Peer agent '")));
             const latestPersisted = persistedMessages.at(-1);
             if (latestPersisted?.role === 'user'
+                && !(reason === 'resume' && prompt === subagent_1.SUBAGENT_RECOVERY_PROMPT)
                 && (reason === 'spawn' || reason === 'resume' || prompt.includes(latestPersisted.content))) {
                 persistedMessages.pop();
             }
@@ -8644,6 +9093,18 @@ class Agent {
                     entry.vision_image_path = message.vision_image_path;
                 return entry;
             });
+            const compression = sa.metadata?.contextCompression;
+            if (compression && typeof compression.at === 'string' && typeof compression.summary === 'string') {
+                child.lastCompression = {
+                    at: compression.at, summary: compression.summary,
+                    originalMessages: Number(compression.originalMessages) || 0,
+                    compressedMessages: Number(compression.compressedMessages) || 0,
+                    originalChars: Number(compression.originalChars) || 0,
+                    compressedChars: Number(compression.compressedChars) || compression.summary.length,
+                    compressedTokens: Number(compression.compressedTokens) || 0,
+                    model: String(compression.model || model), fallback: !!compression.fallback,
+                };
+            }
             child.subscribeAgentKernelUserMessageStart(content => {
                 const match = String(content || '').match(/^\[Peer mailbox id=([0-9a-f-]{36})\b/i);
                 if (match)
@@ -8694,6 +9155,8 @@ class Agent {
             if (unrelayPeerEvents)
                 unrelayPeerEvents();
             this.activePeerAgents.delete(sa.id);
+            if (this.subagents.get(sa.id)?.status === 'closed')
+                this.peerProviderCaches.delete(sa.id);
         }
     }
     persistPeerTranscript(peerId, child) {
@@ -8710,9 +9173,7 @@ class Agent {
     }
     subagentToolDefinitions(defs) {
         const modelCapabilities = this.activeModelConfig();
-        const visionFiltered = modelCapabilities?.vision
-            ? defs
-            : defs.filter((tool) => tool.function?.name !== 'image_inspect');
+        const visionFiltered = defs;
         const withImageGeneration = modelCapabilities?.image_output
             ? [...visionFiltered, {
                     type: 'function',
@@ -8756,8 +9217,6 @@ class Agent {
         }
     }
     async handleImageInspect(args) {
-        if (!this.activeModelConfig()?.vision)
-            return '[Image inspect unavailable] The selected model has not passed vision validation.';
         let input = {};
         try {
             input = JSON.parse(args);
@@ -9151,7 +9610,7 @@ class Agent {
             const modelName = String(compressionModel || this.activeModelName()).trim();
             if (!modelName)
                 return { summary: fallbackSummary, model: 'local-fallback', fallback: true };
-            const generated = await this.withTimeout(provider.chat(modelName, [...prefixMessages, { role: 'user', content: prompt }], system, temperature, budget.summaryTokens, signal), 120000);
+            const generated = await this.withTimeout(this.chatWithConversationUsage(provider, modelName, [...prefixMessages, { role: 'user', content: prompt }], system, temperature, budget.summaryTokens, signal), 120000);
             const generatedText = String(generated || '').trim();
             if (!generatedText || /^\[LLM Error(?::|\])/i.test(generatedText) || /^LLM Error:/i.test(generatedText)) {
                 return { summary: fallbackSummary, model: 'local-fallback', fallback: true };
@@ -9472,12 +9931,18 @@ class Agent {
             ].join('\n'));
         }
         if (this.intelligence === 'ultra') {
-            parts.push([
+            parts.push(this.isSubagentRuntime ? [
+                '[Ultra Intelligence – Specialist Role]',
+                'Own the delegated task and complete its implementation or investigation yourself. Preserve the assigned file and responsibility boundaries. You may delegate a concrete independent subtask only when it saves time while you continue useful work; never pass your whole assignment to another peer or create a chain of coordinators.',
+                'Reuse an existing peer for follow-up work. Send concise, addressed mailbox messages only for new evidence, dependencies, blockers, handoffs or actionable corrections; avoid repeated status checks and unchanged progress messages. Include exact references and verification evidence in your result.',
+            ].join('\n') : [
                 '[Ultra Intelligence – Orchestrator Role]',
-                'You are the lead orchestrator. Actively decompose complex tasks into parallel sub-tasks. Use the `SubAgent` tool to create specialized SubAgents for each distinct sub-task. Use `task_create` only for the conversation checklist; it never creates a SubAgent. Coordinate the SubAgent team: assign clear responsibilities, merge results, resolve conflicts, and produce a unified final output. SubAgents are your team; delegate aggressively and manage them as a manager, not just a tool caller.',
-                'Do not attempt to do all the work yourself. Use SubAgents for parallel investigation, verification, implementation, and review.',
+                'You are the lead orchestrator. Decompose complex work into concrete independent sub-tasks and create specialized peers with `SubAgent`. Give each peer a clear objective, file or responsibility boundary, dependencies, deliverable and acceptance check. Retain useful work locally while peers investigate, implement or review; sequence dependent work and prevent overlapping edits. Merge evidence, resolve conflicts and own the final verification.',
+                'Use task_create only for the conversation checklist; it never creates a SubAgent. Use the available shared concurrency when independent work exists, but do not create peers merely to fill slots. Reuse existing peers for follow-up work. Prefer concise addressed mailbox updates for new evidence, dependencies, blockers and corrections; avoid redundant broadcasts, repeated status checks and unchanged progress messages.',
             ].join('\n'));
         }
+        if (this.shouldExposeToolInterface())
+            parts.push('Peer communication: subagent_send defaults to wakeup=false and the last visible text-history entry. An active receiver processes either wakeup value normally; use wakeup=true when an inactive peer or root must resume work. Choose concise sender-written summaries or explicit ranges of text/tool history, and forward only evidence relevant to the recipient. Use id="root" for the main agent. Do not retransmit unchanged history or rewrite earlier context to deliver a message.');
         parts.push(this.buildModePrompt());
         const value = this.contextV2.orchestrator.assemble({
             // Keep the complete base prompt in one stable section. The linked_plan
@@ -9535,6 +10000,47 @@ class Agent {
             currentUserInput: '',
         });
     }
+    subagentSettlementReceipt(id) {
+        const peer = this.subagents.get(id);
+        return !this.isSubagentRuntime && peer && typeof peer.result === 'string'
+            && Number.isSafeInteger(peer.settlementRevision) && Number(peer.settlementRevision) > 0
+            ? { peerId: peer.id, revision: peer.settlementRevision } : undefined;
+    }
+    /** Peer jobs share a durable request prefix; credentials only enter its hash. */
+    peerRequestCacheIdentity(systemPrompt, catalog) {
+        if (!this.isSubagentRuntime)
+            return undefined;
+        return crypto.createHash('sha256').update(JSON.stringify({
+            systemPrompt, catalog, model: this.activeModelConfig(),
+            apiMode: this.config.openAIApiMode(), adapters: this.config.contextFlag('provider_adapters_v2'),
+            proxy: this.providerProxyConfig(), intelligence: this.intelligence,
+            compression: this.lastCompression?.at || '',
+        })).digest('hex');
+    }
+    readPeerRequestCache(identity) {
+        if (!identity)
+            return undefined;
+        const saved = this.subagents.get(this.runtimeActorId)?.metadata?.requestCache;
+        if (saved?.version !== 1 || saved.identity !== identity || typeof saved.taskFocus !== 'string'
+            || !Array.isArray(saved.initialTools) || !saved.initialTools.every(name => typeof name === 'string')
+            || !Array.isArray(saved.provisionedTools) || !saved.provisionedTools.every(name => typeof name === 'string'))
+            return undefined;
+        return { ...saved, initialTools: saved.initialTools.slice(), provisionedTools: saved.provisionedTools.slice() };
+    }
+    persistPeerRequestCache(cache) {
+        if (!this.isSubagentRuntime)
+            return;
+        const previous = this.subagents.get(this.runtimeActorId)?.metadata?.requestCache;
+        if (JSON.stringify(previous) !== JSON.stringify(cache)) {
+            this.subagents.patchMetadata(this.runtimeActorId, { requestCache: cache });
+        }
+    }
+    checkpointPeerInput() {
+        // Called at the first real provider boundary, after the input has entered
+        // working history. Commit context and job progress in one durable write.
+        if (this.isSubagentRuntime)
+            this.subagentContextPersist?.(this.history, this.lastCompression, true);
+    }
     cachedToolDefinitions() {
         const identity = JSON.stringify({
             mode: this.mode,
@@ -10008,7 +10514,9 @@ function routeProviderFingerprint(provider) {
     });
 }
 function modelConfigurationFingerprint(model) {
-    const { validation, evaluation, _previous_name, previous_name, ...configuration } = model;
+    const { validation, evaluation, response_health, enabled, _previous_name, previous_name, ...configuration } = model;
+    void response_health;
+    void enabled;
     void validation;
     void evaluation;
     void _previous_name;
@@ -10050,12 +10558,7 @@ function resetEditedModelValidationEvidence(incomingProviders, existingProviders
     }
 }
 function modelConfigIsUnavailable(model) {
-    const validationStatus = effectiveModelValidationStatus(model);
-    if (model.validation?.level !== 'discovered'
-        && (validationStatus === 'unavailable' || validationStatus === 'auth_error' || validationStatus === 'invalid_config'))
-        return true;
-    const evaluationStatus = validationStatus === 'degraded' ? 'degraded' : String(model.evaluation?.status || '').toLowerCase();
-    return evaluationStatus === 'unavailable' || evaluationStatus.startsWith('error');
+    return model.enabled === false;
 }
 function parseDeploymentSelectionValue(value) {
     const marker = String(value || '').trim();