nolo-cli 0.148.0-alpha.1 → 0.151.0-alpha.2

package/{chunk-4H22P2JV.js → chunk-AUIJZACN.js}

@@ -2,7 +2,7 @@ import {
   DEVIN_CONNECT_URL,
   parseSseDataLineJson,
   parseSseDataLineObject
-} from "./chunk-P6GMCCAT.js";
+} from "./chunk-GQV5KHJU.js";
 import {
   applyChatCompletionDelta,
   applyResponsesToolEvent,
@@ -11,39 +11,50 @@ import {
   flushChatCompletionStream,
   providerHttpFailure,
   throwIfChatCompletionStreamFailed
-} from "./chunk-QXGPFY6J.js";
+} from "./chunk-LGN377P3.js";
 import {
   readSseFrames
-} from "./chunk-GMZLP5DV.js";
+} from "./chunk-HNUWUO75.js";
+import {
+  evaluateFileWritePolicy,
+  summarizeToolArguments
+} from "./chunk-CHOZJMJS.js";
+import {
+  EXECUTION_BACKEND_KINDS
+} from "./chunk-PWTNI4N7.js";
 import {
   hasImageInRuntimeMessages,
   resolveAgentContextWindow,
   stripImagePartsFromMessages
-} from "./chunk-OHOVNO7I.js";
-import {
-  downgradeUnparsableToolCalls,
-  hasParsableObjectArguments,
-  repairTruncatedToolArguments,
-  sanitizeForOutbound
-} from "./chunk-CQ3WA2NE.js";
+} from "./chunk-UOKFKFPO.js";
 import {
   clipToolText,
   resolveAgentImageInputSupport,
   resolveHistoricalToolContentCap,
   resolveToolOutputProfile
-} from "./chunk-PQWU42UQ.js";
+} from "./chunk-GCKHQECX.js";
 import {
-  buildDialogFallbackTitleFromUserInput
-} from "./chunk-2MBTWINN.js";
+  applyShapingCounts,
+  attachProjectionFacts,
+  classifyOutboundErrorCategory,
+  createOutboundDiagnosticCall,
+  createRequestFacts,
+  createRequestShapingCounts,
+  projectUserPartForModel,
+  resolveOutboundDiagnosticSink,
+  writeThinkingFacts
+} from "./chunk-G6OOUQWJ.js";
 import {
   createThinkParserState,
   createToolCallAccumulator,
   createToolCallTextParserState,
   extractThinkContent,
   finalizeAccumulatedToolCalls
-} from "./chunk-N7J63Q6C.js";
+} from "./chunk-56GBUMO5.js";
 import {
   DELETE_SAFETY_RED_LINE,
+  PARALLEL_DISPATCH_DEFAULT_RULE,
+  PLATFORM_RISK_CONTROL_RULE,
   TOOL_GUIDED_SECTION_ORDER,
   buildIdentityBlock,
   buildRuntimeGuidanceBlocks,
@@ -51,21 +62,32 @@ import {
   detectDispatchIntentFromMessages,
   estimateContextTokens,
   hashStablePrefixContent,
-  normalizeChatCompletionsBodyForProvider,
-  requiresBareImageUrl,
-  resolveToolGuidedSections,
-  toBareImageUrlMessages
-} from "./chunk-K2CSUCHJ.js";
+  resolveToolGuidedSections
+} from "./chunk-WD4XYDYC.js";
 import {
+  classifyUnparsableToolArgs,
+  collectStablePromptPrefix,
   convertMessagesToResponsesInput,
+  downgradeUnparsableToolCalls,
   extractReasoningFromResponseOutput,
   extractTextFromResponseOutput,
   extractToolCallsFromResponseOutput,
   getUsageRequestOptions,
+  hasParsableObjectArguments,
+  markDowngradedToolTurnOrigin,
+  normalizeChatCompletionsBodyForProvider,
+  repairTruncatedToolArguments,
+  requiresBareImageUrl,
+  resolveReasoningReplayOptions,
+  sanitizeForOutbound,
+  scanTruncation,
   shouldStripReasoningContentForOutbound,
+  stablePromptCacheKey,
+  toBareImageUrlMessages,
   toOpenAiCompatibleMessages,
-  toResponsesTools
-} from "./chunk-PUOC4YRO.js";
+  toResponsesTools,
+  transferDowngradedToolTurnOrigin
+} from "./chunk-3SZA4U64.js";
 import {
   BRIDGE_STREAM_MAX_CHARS,
   DEFAULT_READ_DIALOG_MAX_RESPONSE_CHARS,
@@ -80,14 +102,12 @@ import {
   parseNoloWorkspaceToolArguments,
   readTextStreamUpToChars,
   resolveNoloDialogInput
-} from "./chunk-RGNEEJ3Y.js";
+} from "./chunk-QLQ573SU.js";
 import {
-  buildProviderAuthHeaders,
-  buildProviderExecutionPlan
-} from "./chunk-27ONFIEY.js";
+  buildDialogFallbackTitleFromUserInput
+} from "./chunk-2MBTWINN.js";
 import {
   EMPTY_ASSISTANT_REPAIR_PROMPT,
-  getModelContextWindow,
   hasAssistantVisibleOutput,
   normalizeUsage,
   readCacheCreationInputTokens,
@@ -95,18 +115,20 @@ import {
   resolveEmptyAssistantFallbackMessage,
   resolveEmptyAssistantOutcome,
   resolveTruncatedReasoningTailLog
-} from "./chunk-AKG5W4LG.js";
+} from "./chunk-6CCFTVBP.js";
 import {
   COMPACTION_SUMMARY_SCHEMA_VERSION,
   COMPACTION_SUMMARY_SYSTEM_PROMPT,
+  TOOL_RESULT_TRUNCATE_CHARS,
   buildCompactionMetricsFromPlan,
   buildCompactionUserContent,
-  clipCompactText,
+  computeSummaryInputTokenCap,
   createProviderCallTimingTracker,
   finalizeProviderCallTiming,
   formatCompactionMetricsLog,
   formatFileOperationsFromMessages,
   formatMessagesForSummaryWithTruncation,
+  getModelContextWindow,
   isMeaningfulResponsesOutput,
   observeMeaningfulProviderResponse,
   planCompression,
@@ -114,40 +136,40 @@ import {
   resolveCompressionTriggerRatio,
   truncateToolOutputForContext,
   withProviderCallTimingFields
-} from "./chunk-RYZINGPM.js";
-import {
-  estimateTokenCount
-} from "./chunk-PSCNXBYA.js";
-import {
-  toErrorMessage
-} from "./chunk-HNMXYYJR.js";
+} from "./chunk-BPMPOFWP.js";
 import {
-  resolveNoloStateDir
-} from "./chunk-ZWQUWF6W.js";
+  clipCompactText
+} from "./chunk-5MMAK75Q.js";
 import {
-  buildDialogSummaryLayer
-} from "./chunk-HDLLCBRF.js";
+  asRecordOrEmpty
+} from "./chunk-KX6YBIHG.js";
 import {
-  buildUserResponseLanguageContext
-} from "./chunk-4VJAC32I.js";
+  isAbortError
+} from "./chunk-7DPNBQSV.js";
 import {
   canonicalizeToolName,
   canonicalizeToolNames
-} from "./chunk-XUWRURDF.js";
-import {
-  asRecordOrEmpty
-} from "./chunk-KX6YBIHG.js";
+} from "./chunk-5EBLANFT.js";
 import {
-  asTrimmedNonEmptyStringArray,
   dialogMessageKey,
   dialogMessageRange
-} from "./chunk-3AH7LNUB.js";
+} from "./chunk-5EMSBTQ6.js";
+import {
+  asTrimmedNonEmptyStringArray
+} from "./chunk-I42VC5KR.js";
+import {
+  asOptionalPositiveFiniteNumber
+} from "./chunk-U6VC4MU4.js";
 import {
   asOptionalFiniteNumber
 } from "./chunk-WWC7I6TA.js";
 import {
-  asTrimmedLowercaseString
-} from "./chunk-QSJ3HFEF.js";
+  estimateTokenCount
+} from "./chunk-PSCNXBYA.js";
+import {
+  buildProviderAuthHeaders,
+  buildProviderExecutionPlan
+} from "./chunk-K2AER7RX.js";
 import {
   isRecord
 } from "./chunk-KUG52IAP.js";
@@ -155,14 +177,26 @@ import {
   asTrimmedString
 } from "./chunk-3EUW3WEO.js";
 import {
-  asOptionalPositiveFiniteNumber
-} from "./chunk-U6VC4MU4.js";
+  toErrorMessage
+} from "./chunk-HNMXYYJR.js";
 import {
   normalizeServerOrigin
 } from "./chunk-CF7PE763.js";
 import {
   asOptionalTrimmedString
 } from "./chunk-G3SUCT4W.js";
+import {
+  asTrimmedLowercaseString
+} from "./chunk-QSJ3HFEF.js";
+import {
+  resolveNoloStateDir
+} from "./chunk-ZWQUWF6W.js";
+import {
+  buildDialogSummaryLayer
+} from "./chunk-VEA7H5FG.js";
+import {
+  buildUserResponseLanguageContext
+} from "./chunk-4VJAC32I.js";
 import {
   __export
 } from "./chunk-4VNS5WPM.js";
@@ -5154,8 +5188,8 @@ var runPromiseExitWith = (context3) => {
   const runFork3 = runForkWith(context3);
   return (effect, options) => {
     const fiber3 = runFork3(effect, options);
-    return new Promise((resolve5) => {
-      fiber3.addObserver((exit3) => resolve5(exit3));
+    return new Promise((resolve6) => {
+      fiber3.addObserver((exit3) => resolve6(exit3));
     });
   };
 };
@@ -12141,8 +12175,8 @@ var toReadableStreamWith = /* @__PURE__ */ dual((args2) => isStream(args2[0]), (
       });
     },
     pull() {
-      return new Promise((resolve5) => {
-        currentResolve = resolve5;
+      return new Promise((resolve6) => {
+        currentResolve = resolve6;
         latch.openUnsafe();
       });
     },
@@ -12546,7 +12580,7 @@ function sanitizeToolCallPairing(messages) {
       if (isContentBlank(stripped.content)) {
         continue;
       }
-      output.push(stripped);
+      output.push(markDowngradedToolTurnOrigin(stripped));
       continue;
     }
     const normalizedAssistant = { ...m, tool_calls: matchedToolCalls };
@@ -12576,11 +12610,11 @@ function resolveSpillDirectory(options) {
   }
   return resolveNoloStateDir("spills");
 }
-function countLines(text) {
-  if (!text) return 0;
+function countLines(text2) {
+  if (!text2) return 0;
   let lines = 1;
-  for (let i = 0; i < text.length; i++) {
-    if (text.charCodeAt(i) === 10) {
+  for (let i = 0; i < text2.length; i++) {
+    if (text2.charCodeAt(i) === 10) {
       lines++;
     }
   }
@@ -12750,18 +12784,18 @@ var QUICK_PROBE_SUBSTRINGS = [
   "PASSWD",
   "SECRET_KEY"
 ];
-function hasPotentialSecrets(text) {
-  if (typeof text !== "string" || text.length === 0) return false;
-  return QUICK_PROBE_SUBSTRINGS.some((probe) => text.includes(probe));
+function hasPotentialSecrets(text2) {
+  if (typeof text2 !== "string" || text2.length === 0) return false;
+  return QUICK_PROBE_SUBSTRINGS.some((probe) => text2.includes(probe));
 }
-function scrubSecrets(text) {
-  if (typeof text !== "string" || text.length === 0) {
-    return { cleaned: text, redactedCount: 0, matchedKinds: [] };
+function scrubSecrets(text2) {
+  if (typeof text2 !== "string" || text2.length === 0) {
+    return { cleaned: text2, redactedCount: 0, matchedKinds: [] };
   }
-  if (!hasPotentialSecrets(text)) {
-    return { cleaned: text, redactedCount: 0, matchedKinds: [] };
+  if (!hasPotentialSecrets(text2)) {
+    return { cleaned: text2, redactedCount: 0, matchedKinds: [] };
   }
-  let cleaned = text;
+  let cleaned = text2;
   let redactedCount = 0;
   const matchedKinds = [];
   for (const pattern of SECRET_PATTERNS) {
@@ -12820,15 +12854,15 @@ ${JSON.stringify(visible)}`;
 }
 function blocksToOpenAiMessages(blocks) {
   const out = [];
-  let text = "";
+  let text2 = "";
   let reasoning = "";
   let pendingToolCalls = [];
   let pendingToolResults = [];
   const flushSegment = () => {
-    if (text === "" && pendingToolCalls.length === 0 && reasoning === "") return;
+    if (text2 === "" && pendingToolCalls.length === 0 && reasoning === "") return;
     out.push({
       role: "assistant",
-      content: text || null,
+      content: text2 || null,
       ...reasoning ? { reasoning_content: reasoning } : {},
       ...pendingToolCalls.length > 0 ? { tool_calls: pendingToolCalls } : {}
     });
@@ -12847,7 +12881,7 @@ function blocksToOpenAiMessages(blocks) {
         ...res?.metadata ? { tool_result_metadata: res.metadata } : {}
       });
     }
-    text = "";
+    text2 = "";
     reasoning = "";
     pendingToolCalls = [];
     pendingToolResults = [];
@@ -12857,7 +12891,7 @@ function blocksToOpenAiMessages(blocks) {
       if (pendingToolCalls.length > 0) {
         flushSegment();
       }
-      text += block.text;
+      text2 += block.text;
       continue;
     }
     if (block.type === "thinking") {
@@ -13045,6 +13079,7 @@ function summarizeHistoricalToolContent(content, toolName, metadata) {
     label: TOOL_OUTPUT_PROJECTION_LABEL
   });
 }
+var toolProjectionMemoMap = /* @__PURE__ */ new WeakMap();
 function prepareMessagesForProviderCall(messages) {
   const paired = sanitizeToolCallPairing(messages);
   let toolMessageCount = 0;
@@ -13055,27 +13090,39 @@ function prepareMessagesForProviderCall(messages) {
     const { context_reference: _contextReference, ...providerMessage } = message;
     const sanitizedContent = providerMessage.content == null ? "" : typeof providerMessage.content === "string" ? providerMessage.content : providerMessage.content;
     if (providerMessage.role !== "tool") {
-      return {
+      return transferDowngradedToolTurnOrigin(message, {
         ...providerMessage,
         content: sanitizedContent
-      };
+      });
     }
     toolMessageCount += 1;
-    rawToolContentChars += contentCharCount(sanitizedContent);
-    const projectedContent = projectToolContentForProvider({
-      content: sanitizedContent,
-      toolName: providerMessage.toolName,
-      metadata: providerMessage.tool_result_metadata,
-      maxChars: resolveToolOutputProfile(providerMessage.toolName).maxChars,
-      label: TOOL_OUTPUT_PROJECTION_LABEL
-    });
-    projectedToolContentChars += contentCharCount(projectedContent);
-    if (contentCharCount(projectedContent) < contentCharCount(sanitizedContent)) {
+    let memo = toolProjectionMemoMap.get(message);
+    if (!memo) {
+      const rawChars = contentCharCount(sanitizedContent);
+      const projectedContent = projectToolContentForProvider({
+        content: sanitizedContent,
+        toolName: providerMessage.toolName,
+        metadata: providerMessage.tool_result_metadata,
+        maxChars: resolveToolOutputProfile(providerMessage.toolName).maxChars,
+        label: TOOL_OUTPUT_PROJECTION_LABEL
+      });
+      const projectedChars = contentCharCount(projectedContent);
+      memo = {
+        projectedContent,
+        rawChars,
+        projectedChars,
+        isTruncated: projectedChars < rawChars
+      };
+      toolProjectionMemoMap.set(message, memo);
+    }
+    rawToolContentChars += memo.rawChars;
+    projectedToolContentChars += memo.projectedChars;
+    if (memo.isTruncated) {
       truncatedToolResults += 1;
     }
     return {
       ...providerMessage,
-      content: projectedContent
+      content: memo.projectedContent
     };
   });
   return {
@@ -13110,13 +13157,36 @@ function prepareHistoryForNextTurn(history, contextReferenceResolver) {
 }
 function filterImagePartsFromMessages(messages, supportsImages) {
   if (supportsImages) return messages;
-  return stripImagePartsFromMessages(messages);
+  return stripImagePartsFromMessages(messages).map(
+    (stripped, index) => transferDowngradedToolTurnOrigin(messages[index], stripped)
+  );
+}
+var MODEL_PROJECTED_USER_PART_TYPES = /* @__PURE__ */ new Set(["attachment", "media_job"]);
+var isModelProjectedUserPart = (part) => typeof part === "object" && part !== null && MODEL_PROJECTED_USER_PART_TYPES.has(
+  part.type
+);
+function projectUserMessageForProvider(message) {
+  if (message.role !== "user" || !Array.isArray(message.content)) return message;
+  let projected = false;
+  const nextContent = [];
+  for (const part of message.content) {
+    if (isModelProjectedUserPart(part)) {
+      nextContent.push(...projectUserPartForModel(part));
+      projected = true;
+    } else {
+      nextContent.push(part);
+    }
+  }
+  return projected ? { ...message, content: nextContent } : message;
 }
 function composeProviderMessages(args2) {
   return downgradeUnparsableToolCalls([
-    ...args2.prefix,
-    ...prepareHistoryForNextTurn(args2.history, args2.contextReferenceResolver),
-    ...args2.suffix ?? []
+    ...args2.prefix.map(projectUserMessageForProvider),
+    ...prepareHistoryForNextTurn(
+      args2.history,
+      args2.contextReferenceResolver
+    ).map(projectUserMessageForProvider),
+    ...(args2.suffix ?? []).map(projectUserMessageForProvider)
   ]);
 }
 function buildMessages(args2) {
@@ -13147,6 +13217,7 @@ ${args2.input}` : [
       messages: composed2.messages,
       prefixCount: prefix2.length,
       poisonDowngraded: composed2.downgraded,
+      poisonStats: composed2.stats,
       stableContextChars: stableContent.length,
       dynamicContextChars: dynamicContent.length,
       ...stableContent ? {
@@ -13168,6 +13239,7 @@ ${args2.input}` : [
     messages: composed.messages,
     prefixCount: prefix.length,
     poisonDowngraded: composed.downgraded,
+    poisonStats: composed.stats,
     stableContextChars: (args2.prompt?.trim() ?? "").length,
     dynamicContextChars: blocks.join("\n\n").length,
     ...systemContent ? {
@@ -13177,26 +13249,6 @@ ${args2.input}` : [
   };
 }
 
-// packages/agent-runtime/fileWritePolicy.ts
-function evaluateFileWritePolicy(args2) {
-  if (args2.sessionApproved) return { permissionDecision: "allow" };
-  return {
-    permissionDecision: "ask",
-    permissionRequest: {
-      id: "permission-file-write-session",
-      tool: args2.tool,
-      action: "file_write",
-      title: "\u786E\u8BA4\u5199\u5165\u6587\u4EF6",
-      body: `\u672C\u4F1A\u8BDD\u9996\u6B21\u5199\u5165\u6587\u4EF6\uFF1A${args2.path}\u3002\u6279\u51C6\u540E\u672C\u4F1A\u8BDD\u540E\u7EED\u5199\u5165\u4E0D\u518D\u9010\u6B21\u786E\u8BA4\u3002`,
-      command: args2.path,
-      suggestedRule: {
-        scope: "session",
-        pattern: { capability: "file_write", target: "session" }
-      }
-    }
-  };
-}
-
 // packages/agent-runtime/toolArgsTruncationPolicy.ts
 import { createHash as createHash2 } from "node:crypto";
 var TRUNCATION_TAIL_DROP_ALLOWED_TOOLS = /* @__PURE__ */ new Set([
@@ -13205,45 +13257,6 @@ var TRUNCATION_TAIL_DROP_ALLOWED_TOOLS = /* @__PURE__ */ new Set([
 function isTailDropRepairAllowed(toolName) {
   return typeof toolName === "string" && TRUNCATION_TAIL_DROP_ALLOWED_TOOLS.has(toolName);
 }
-function scanTruncation(input) {
-  const stack = [];
-  const commaAtDepth = [];
-  let inString = false;
-  let escaped = false;
-  const closersOf = () => stack.slice().reverse().map((ch) => ch === "{" ? "}" : "]").join("");
-  for (let i = 0; i < input.length; i += 1) {
-    const ch = input[i];
-    if (inString) {
-      if (escaped) escaped = false;
-      else if (ch === "\\") escaped = true;
-      else if (ch === '"') inString = false;
-      continue;
-    }
-    if (ch === '"') {
-      inString = true;
-    } else if (ch === "{" || ch === "[") {
-      stack.push(ch);
-      commaAtDepth[stack.length] = void 0;
-    } else if (ch === "}" || ch === "]") {
-      const open = stack.pop();
-      if (open !== (ch === "}" ? "{" : "[")) {
-        return { inString, malformed: true, tailArrayComma: null };
-      }
-      commaAtDepth[stack.length + 1] = void 0;
-    } else if (ch === "," && stack[stack.length - 1] === "[") {
-      commaAtDepth[stack.length] = { index: i, closers: closersOf() };
-    }
-  }
-  let tailArrayComma = null;
-  for (let d = stack.length; d >= 1; d -= 1) {
-    const c = commaAtDepth[d];
-    if (c && stack[d - 1] === "[") {
-      tailArrayComma = c;
-      break;
-    }
-  }
-  return { inString, malformed: false, tailArrayComma };
-}
 function repairTruncatedToolArgumentsDroppingTail(toolName, raw) {
   if (!isTailDropRepairAllowed(toolName)) return null;
   if (typeof raw !== "string") return null;
@@ -13284,50 +13297,6 @@ function buildToolArgsDiagnosticLine(args2) {
   return parts2.join(" ");
 }
 
-// packages/agent-runtime/parseToolArguments.ts
-function parseToolArgumentsJson(raw) {
-  if (!raw?.trim()) return {};
-  try {
-    return asRecordOrEmpty(JSON.parse(raw));
-  } catch {
-    return {};
-  }
-}
-
-// packages/agent-runtime/summarizeToolArguments.ts
-function clip(value, max4 = 240) {
-  return clipCompactText(value, max4);
-}
-function summarizeToolArguments(toolName, rawArgs) {
-  const args2 = parseToolArgumentsJson(rawArgs);
-  const pick = (...keys3) => {
-    for (const key of keys3) {
-      const value = asOptionalTrimmedString(args2[key]);
-      if (value) return value;
-    }
-    return "";
-  };
-  const command = pick("command", "cmd", "runCommand", "executeCommand", "bash");
-  if (command) return clip(command);
-  const query = pick("query", "pattern", "search", "q");
-  if (query) return clip(query);
-  const filePath = pick("filePath", "file_path", "path", "filename", "file");
-  if (filePath) return clip(filePath);
-  const keys2 = Object.keys(args2);
-  if (keys2.length === 0) return "";
-  return clip(
-    keys2.slice(0, 6).map((key) => {
-      const value = args2[key];
-      if (typeof value === "string") return `${key}=${clip(value, 80)}`;
-      if (typeof value === "number" || typeof value === "boolean") {
-        return `${key}=${String(value)}`;
-      }
-      if (Array.isArray(value)) return `${key}[${value.length}]`;
-      return `${key}=${value === null ? "null" : typeof value}`;
-    }).join(" ")
-  );
-}
-
 // packages/agent-runtime/progressGuard.ts
 var DEFAULT_MAX_CONSECUTIVE_IDENTICAL_ROUNDS = 5;
 var DEFAULT_MAX_CONSECUTIVE_STAGNANT_TOOL_ROUNDS = 8;
@@ -13539,14 +13508,14 @@ function computeDeterministicRef(secret) {
   const hex = hasher.digest("hex").slice(0, 12);
   return `vault-cred-${hex}`;
 }
-async function isolateInboundCredentials(text, broker) {
-  if (typeof text !== "string" || text.length === 0 || !broker) {
-    return { safeText: text, isolatedCount: 0, credentials: [] };
+async function isolateInboundCredentials(text2, broker) {
+  if (typeof text2 !== "string" || text2.length === 0 || !broker) {
+    return { safeText: text2, isolatedCount: 0, credentials: [] };
   }
-  if (!hasPotentialSecrets(text)) {
-    return { safeText: text, isolatedCount: 0, credentials: [] };
+  if (!hasPotentialSecrets(text2)) {
+    return { safeText: text2, isolatedCount: 0, credentials: [] };
   }
-  let safeText = text;
+  let safeText = text2;
   const isolatedCredentials = [];
   for (const { kind, regex } of INBOUND_PATTERNS) {
     regex.lastIndex = 0;
@@ -13681,25 +13650,25 @@ var SHELL_STRING_EXECUTION_PATTERNS = [
   /\bpython[\d.]*\s+(?:-\S+\s+)*-c\b/i,
   /\b(?:perl|ruby)\s+(?:-\S+\s+)*-e\b/i
 ];
-var stripQuotedSegments = (text) => {
+var stripQuotedSegments = (text2) => {
   let out = "";
   let i = 0;
-  while (i < text.length) {
-    const ch = text[i];
+  while (i < text2.length) {
+    const ch = text2[i];
     if (ch === "\\") {
-      out += text.slice(i, i + 2);
+      out += text2.slice(i, i + 2);
       i += 2;
     } else if (ch === "'") {
-      const end3 = text.indexOf("'", i + 1);
-      if (end3 === -1) return out + text.slice(i);
+      const end3 = text2.indexOf("'", i + 1);
+      if (end3 === -1) return out + text2.slice(i);
       out += "''";
       i = end3 + 1;
     } else if (ch === '"') {
       let j = i + 1;
-      while (j < text.length && text[j] !== '"') {
-        j += text[j] === "\\" ? 2 : 1;
+      while (j < text2.length && text2[j] !== '"') {
+        j += text2[j] === "\\" ? 2 : 1;
       }
-      if (j >= text.length) return out + text.slice(i);
+      if (j >= text2.length) return out + text2.slice(i);
       out += '""';
       i = j + 1;
     } else {
@@ -13710,7 +13679,7 @@ var stripQuotedSegments = (text) => {
   return out;
 };
 var normalizeUserInput = (value) => asTrimmedLowercaseString(value);
-var containsAny = (text, patterns) => patterns.some((pattern) => text.includes(pattern));
+var containsAny = (text2, patterns) => patterns.some((pattern) => text2.includes(pattern));
 var hasExplicitDestructivePermission = (userInput) => {
   const normalized = normalizeUserInput(userInput);
   if (!normalized) return false;
@@ -13914,109 +13883,232 @@ async function evaluateCapabilityPolicy(capability, normalizedInput, ctx) {
   }
 }
 
-// packages/agent-runtime/localWorkspaceTools.ts
-import { existsSync as existsSync3 } from "node:fs";
+// packages/agent-runtime/capabilities/execShellCapability.ts
 import { createHash as createHash3 } from "node:crypto";
-import { lstat, mkdir, readdir as readdir2, readFile as readFile3, realpath, stat as stat3, writeFile } from "node:fs/promises";
-import { homedir } from "node:os";
-import { dirname, isAbsolute as isAbsolute2, relative as relative3, resolve as resolve4, sep } from "node:path";
-import { spawn as spawnChildProcess3 } from "node:child_process";
 
-// packages/core/readRangeLedger.ts
-function filterRetainedLedgerRecords(records, retainedCap) {
-  return records.filter((record) => record.chars <= retainedCap);
-}
-function isValidRange(range3) {
-  return Number.isInteger(range3.startLine) && Number.isInteger(range3.endLine) && range3.endLine >= range3.startLine;
-}
-function mergeLineRanges(ranges) {
-  const sorted = ranges.filter(isValidRange).slice().sort((a, b) => a.startLine - b.startLine);
-  const merged = [];
-  for (const range3 of sorted) {
-    const last = merged[merged.length - 1];
-    if (last && range3.startLine <= last.endLine + 1) {
-      last.endLine = Math.max(last.endLine, range3.endLine);
-    } else {
-      merged.push({ startLine: range3.startLine, endLine: range3.endLine });
+// packages/agent-runtime/execShellCompletionWarnings.ts
+var BG_ESCAPE_WORD_PATTERN = /(?:^|[\s;|(&/\\])(nohup|disown|setsid|start-process)(?=$|[\s;|)&])/i;
+var SHELL_SPLIT_CHARS = /* @__PURE__ */ new Set([";", "|", "&", "(", ")", "<", ">", "\n", "	", " "]);
+function maskQuotedAndEscaped(command) {
+  const out = Array.from(command);
+  let quote = null;
+  for (let i = 0; i < out.length; i += 1) {
+    const ch = out[i];
+    if (quote) {
+      out[i] = " ";
+      if (ch === "\\" && quote !== "'") {
+        if (i + 1 < out.length) out[i + 1] = " ";
+        i += 1;
+      } else if (ch === quote) {
+        quote = null;
+      }
+      continue;
+    }
+    if (ch === "\\") {
+      out[i] = " ";
+      if (i + 1 < out.length) out[i + 1] = " ";
+      i += 1;
+      continue;
+    }
+    if (ch === "'" || ch === '"' || ch === "`") {
+      quote = ch;
+      out[i] = " ";
+      continue;
+    }
+    if (ch === "#" && (i === 0 || /[\s;]/.test(out[i - 1] ?? " "))) {
+      while (i < out.length && out[i] !== "\n") {
+        out[i] = " ";
+        i += 1;
+      }
     }
   }
-  return merged;
-}
-function isLineRangeCovered(request3, covered) {
-  if (!isValidRange(request3)) return false;
-  let open = request3.startLine;
-  for (const range3 of mergeLineRanges(covered)) {
-    if (range3.endLine < open) continue;
-    if (range3.startLine > open) return false;
-    open = range3.endLine + 1;
-    if (open > request3.endLine) return true;
-  }
-  return open > request3.endLine;
+  return out.join("");
 }
-
-// packages/agent-runtime/runtimeCompat.ts
-import { existsSync as existsSync2, readdirSync as readdirSync2, statSync as statSync2 } from "node:fs";
-import { join as join3 } from "node:path";
-import { spawn } from "node:child_process";
-var IS_WINDOWS = process.platform === "win32";
-function isExecutableFile(candidate) {
-  if (!existsSync2(candidate)) return false;
-  try {
-    return statSync2(candidate).isFile();
-  } catch {
-    return false;
+function readRedirectTarget(original, start) {
+  let i = start;
+  while (i < original.length && /\s/.test(original[i] ?? "")) {
+    i += 1;
   }
-}
-function resolveExecutableOnPath(name) {
-  if (IS_WINDOWS && !/\.[a-z]+$/i.test(name)) {
-    const exts = (process.env.PATHEXT || ".EXE;.CMD;.BAT").split(";").filter(Boolean);
-    for (const ext of exts) {
-      const found = resolveExecutableOnPath(name + ext);
-      if (found) return found;
+  if (i >= original.length) return void 0;
+  let text2 = "";
+  let j = i;
+  while (j < original.length) {
+    const o = original[j];
+    if (o === "'" || o === '"' || o === "`") {
+      const quote = o;
+      j += 1;
+      while (j < original.length && original[j] !== quote) {
+        if (original[j] === "\\" && quote !== "'" && j + 1 < original.length) {
+          text2 += original[j + 1];
+          j += 2;
+          continue;
+        }
+        text2 += original[j];
+        j += 1;
+      }
+      j += 1;
+      continue;
     }
-    return null;
-  }
-  const pathEnv = process.env.PATH ?? "";
-  const sep2 = pathEnv.includes(";") && IS_WINDOWS ? ";" : ":";
-  const pathDirs = pathEnv.split(sep2).filter(Boolean);
-  const fallbackDirs = IS_WINDOWS ? [] : [
-    "/opt/homebrew/bin",
-    "/usr/local/bin",
-    "/usr/bin",
-    "/bin",
-    `${process.env.HOME ?? ""}/.local/bin`
-  ].filter(Boolean);
-  for (const dir of [...pathDirs, ...fallbackDirs]) {
-    const candidate = join3(dir, name);
-    if (isExecutableFile(candidate)) return candidate;
+    if (/\s/.test(o) || SHELL_SPLIT_CHARS.has(o)) break;
+    text2 += o;
+    j += 1;
   }
-  return null;
+  if (!text2 || text2 === "$") return void 0;
+  return { text: text2, end: j };
 }
-function createGlob(pattern) {
-  const regex = globToRegExp(pattern);
-  return {
-    match(path) {
-      return regex.test(path);
-    },
-    scanSync(opts) {
-      const dot = opts.dot ?? false;
-      const results2 = [];
-      walkDir(opts.cwd, "", dot, results2);
-      return results2.filter((rel) => regex.test(rel));
-    }
-  };
+function isIgnoredRedirectTarget(target) {
+  return target === "/dev/null";
 }
-function walkDir(dir, prefix, dot, out) {
-  let entries;
-  try {
-    entries = readdirSync2(dir, { withFileTypes: true, encoding: "utf8" });
-  } catch {
-    return;
-  }
-  for (const entry of entries) {
-    const name = String(entry.name);
-    if (!dot && name.startsWith(".")) continue;
-    const rel = prefix ? `${prefix}/${name}` : name;
+function detectExecShellSynchronousWarnings(command, shell) {
+  const masked = maskQuotedAndEscaped(command);
+  const isPowerShell = shell?.resolvedShell === "powershell";
+  const redirectTargets = [];
+  let backgrounded = false;
+  let i = 0;
+  while (i < masked.length) {
+    const ch = masked[i];
+    if (ch === "&") {
+      const next = masked[i + 1];
+      if (next === "&") {
+        i += 2;
+        continue;
+      }
+      if (next === ">") {
+        let j = i + 2;
+        if (masked[j] === ">") j += 1;
+        const target = readRedirectTarget(command, j);
+        if (target && !isIgnoredRedirectTarget(target.text)) redirectTargets.push(target.text);
+        i = target ? target.end : j;
+        continue;
+      }
+      const prev = masked[i - 1];
+      if (prev === ">" || prev === "<") {
+        i += 1;
+        continue;
+      }
+      if (isPowerShell) {
+        i += 1;
+        continue;
+      }
+      backgrounded = true;
+      i += 1;
+      continue;
+    }
+    if (ch === ">") {
+      const prev = masked[i - 1];
+      if (prev === ">" || prev === "&" || prev === "<") {
+        i += 1;
+        continue;
+      }
+      let j = i + 1;
+      if (masked[j] === ">") j += 1;
+      if (masked[j] === "&") {
+        const ampTarget = readRedirectTarget(command, j + 1);
+        const isFdDuplication = ampTarget !== void 0 && (/^\d+$/.test(ampTarget.text) || ampTarget.text === "-");
+        if (ampTarget && !isFdDuplication && !isIgnoredRedirectTarget(ampTarget.text)) {
+          redirectTargets.push(ampTarget.text);
+        }
+        i = ampTarget ? ampTarget.end : j + 1;
+        continue;
+      }
+      const target = readRedirectTarget(command, j);
+      if (target && !isIgnoredRedirectTarget(target.text)) redirectTargets.push(target.text);
+      i = target ? target.end : j;
+      continue;
+    }
+    if (ch === "<") {
+      i += masked[i + 1] === "<" || masked[i + 1] === "&" ? 2 : 1;
+      continue;
+    }
+    i += 1;
+  }
+  const wordMatch = BG_ESCAPE_WORD_PATTERN.exec(masked);
+  if (wordMatch) backgrounded = true;
+  const warnings = [];
+  if (redirectTargets.length > 0) {
+    const target = redirectTargets[0];
+    warnings.push({
+      kind: "output-redirect",
+      redirectTarget: target,
+      message: `[wake-safety] This execShell call completed synchronously; its output was redirected to ${target}. That file is NOT delivered by any completion notification \u2014 no tracked background task was created. If you need the result, read that file in this turn.`
+    });
+  }
+  if (backgrounded) {
+    warnings.push({
+      kind: "shell-backgrounding",
+      message: `[wake-safety] Detected shell-internal backgrounding (lone \`&\`, nohup/disown/setsid/Start-Process or similar). Descendant processes are NOT tracked as platform tasks and will not produce completion notifications; text such as \`LAUNCHED\` printed by the command is plain stdout, not a platform receipt.`
+    });
+  }
+  return warnings;
+}
+
+// packages/agent-runtime/workspaceShell.ts
+import { resolve } from "node:path";
+import { spawn as spawnChildProcess } from "node:child_process";
+
+// packages/agent-runtime/runtimeCompat.ts
+import { existsSync as existsSync2, readdirSync as readdirSync2, statSync as statSync2 } from "node:fs";
+import { join as join3 } from "node:path";
+import { spawn } from "node:child_process";
+var IS_WINDOWS = process.platform === "win32";
+function isExecutableFile(candidate) {
+  if (!existsSync2(candidate)) return false;
+  try {
+    return statSync2(candidate).isFile();
+  } catch {
+    return false;
+  }
+}
+function resolveExecutableOnPath(name) {
+  if (IS_WINDOWS && !/\.[a-z]+$/i.test(name)) {
+    const exts = (process.env.PATHEXT || ".EXE;.CMD;.BAT").split(";").filter(Boolean);
+    for (const ext of exts) {
+      const found = resolveExecutableOnPath(name + ext);
+      if (found) return found;
+    }
+    return null;
+  }
+  const pathEnv = process.env.PATH ?? "";
+  const sep2 = pathEnv.includes(";") && IS_WINDOWS ? ";" : ":";
+  const pathDirs = pathEnv.split(sep2).filter(Boolean);
+  const fallbackDirs = IS_WINDOWS ? [] : [
+    "/opt/homebrew/bin",
+    "/usr/local/bin",
+    "/usr/bin",
+    "/bin",
+    `${process.env.HOME ?? ""}/.local/bin`
+  ].filter(Boolean);
+  for (const dir of [...pathDirs, ...fallbackDirs]) {
+    const candidate = join3(dir, name);
+    if (isExecutableFile(candidate)) return candidate;
+  }
+  return null;
+}
+function createGlob(pattern) {
+  const regex = globToRegExp(pattern);
+  return {
+    match(path) {
+      return regex.test(path);
+    },
+    scanSync(opts) {
+      const dot = opts.dot ?? false;
+      const results2 = [];
+      walkDir(opts.cwd, "", dot, results2);
+      return results2.filter((rel) => regex.test(rel));
+    }
+  };
+}
+function walkDir(dir, prefix, dot, out) {
+  let entries;
+  try {
+    entries = readdirSync2(dir, { withFileTypes: true, encoding: "utf8" });
+  } catch {
+    return;
+  }
+  for (const entry of entries) {
+    const name = String(entry.name);
+    if (!dot && name.startsWith(".")) continue;
+    const rel = prefix ? `${prefix}/${name}` : name;
     const full = join3(dir, name);
     if (entry.isDirectory()) {
       walkDir(full, rel, dot, out);
@@ -14107,9 +14199,9 @@ function spawnToWebStreams(options) {
     env: options.env,
     stdio: ["ignore", "pipe", "pipe"]
   });
-  const exited = new Promise((resolve5) => {
-    child.on("exit", (code) => resolve5(code ?? 1));
-    child.on("error", () => resolve5(127));
+  const exited = new Promise((resolve6) => {
+    child.on("exit", (code) => resolve6(code ?? 1));
+    child.on("error", () => resolve6(127));
   });
   const toWeb = (stream) => {
     if (!stream) return null;
@@ -14128,220 +14220,26 @@ function spawnToWebStreams(options) {
   };
 }
 
-// packages/agent-runtime/fileTextSearch.ts
-import { readdir, readFile as readFile2, stat as stat2 } from "node:fs/promises";
-import { basename, relative as relative2, resolve as resolve2 } from "node:path";
-import { spawn as spawnChildProcess } from "node:child_process";
-
-// packages/agent-runtime/gitignore.ts
-import { readFile, stat } from "node:fs/promises";
-import { resolve } from "node:path";
-async function readRootGitignorePatterns(workspaceRoot) {
-  const content = await readFile(resolve(workspaceRoot, ".gitignore"), "utf8").catch(() => null);
-  if (content === null) return [];
-  return content.split(/\r?\n/).map((line) => line.trim()).filter((line) => line && !line.startsWith("#") && !line.startsWith("!")).flatMap((line) => {
-    const unanchored = line.replace(/^\//, "");
-    if (unanchored.endsWith("/")) return [`${unanchored}**`];
-    if (unanchored.includes("**")) return [unanchored];
-    return [unanchored, `${unanchored}/**`];
-  });
-}
-async function hasRootGitignore(workspaceRoot) {
-  try {
-    await stat(resolve(workspaceRoot, ".gitignore"));
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-// packages/agent-runtime/fileTextSearch.ts
-var normalizePath = (value) => value.replaceAll("\\", "/");
-var pathFor = (root, file, absolute = false) => absolute ? normalizePath(file) : normalizePath(relative2(root, file) || basename(file));
-var COMMAND_LIMIT_HEADROOM = 1;
-async function runCommand(binary, args2, cwd, maxResults) {
-  const recordLimit = maxResults === void 0 ? 0 : Math.max(0, maxResults) + COMMAND_LIMIT_HEADROOM;
-  return await new Promise((done4) => {
-    let stdout = "", stderr = "", recordCount = 0, stopped = false;
-    try {
-      const child = spawnChildProcess(binary, args2, { cwd, stdio: ["ignore", "pipe", "pipe"] });
-      child.stdout.on("data", (chunk) => {
-        stdout += chunk.toString();
-        recordCount = parseMatches(cwd, stdout).length;
-        if (recordLimit > 0 && recordCount >= recordLimit && !stopped) {
-          stopped = true;
-          child.kill();
-        }
-      });
-      child.stderr.on("data", (chunk) => {
-        stderr += chunk.toString();
-      });
-      child.on("error", () => done4({ stdout, stderr, outcome: { kind: "spawn-failed" } }));
-      child.on("close", (exitCode) => done4({ stdout, stderr, outcome: stopped ? { kind: "stopped-by-limit" } : { kind: "completed", exitCode } }));
-    } catch {
-      done4({ stdout, stderr, outcome: { kind: "spawn-failed" } });
-    }
-  });
+// packages/agent-runtime/processTask.ts
+var PROCESS_TASK_TERMINAL_STATUSES = [
+  "stopped",
+  "exited",
+  "failed"
+];
+function isProcessTaskTerminalStatus(status) {
+  return typeof status === "string" && PROCESS_TASK_TERMINAL_STATUSES.includes(status);
 }
-function commandArgs(o, binary, target) {
-  const args2 = binary === "rg" ? ["--line-number", "--no-heading", "--color", "never", "--null"] : ["-RIn", "--binary-files=without-match", "--null"];
-  if (binary === "rg") args2.push("--no-require-git");
-  if (o.regex !== true) args2.push(binary === "rg" ? "--fixed-strings" : "-F");
-  else if (binary === "grep") args2.push("-E");
-  if (o.caseSensitive === false) args2.push("-i");
-  if (binary === "rg") {
-    if (o.includeIgnored) args2.push("--no-ignore");
-    for (const x of o.exclude ?? []) args2.push("--glob", `!${x}`);
-    if (o.include) args2.push("--glob", o.include);
-  } else {
-    for (const x of o.exclude ?? []) {
-      const clean = x.replace(/\/\*\*$/, "");
-      if (clean && !clean.includes("/")) args2.push("--exclude-dir", clean);
-    }
-    if (o.include) args2.push("--include", o.include);
+function reportedTaskStatus(source, exitCode) {
+  if (source === "killed") {
+    return "stopped";
   }
-  args2.push("--", o.query, target);
-  return args2;
-}
-function parseMatches(root, output) {
-  const records = [];
-  const pattern = /(?:^|\n)([^\0\n]+)\0(\d+):(.*?)(?=\n[^\0\n]+\0|$)/gs;
-  for (const match7 of output.matchAll(pattern)) {
-    records.push({ file: resolve2(root, match7[1] ?? ""), line: Number(match7[2]), text: (match7[3] ?? "").replace(/\n$/, "") });
+  if (source === "exited") {
+    return exitCode !== void 0 && exitCode !== 0 ? "failed" : "exited";
   }
-  return records;
-}
-async function decorate(root, raw, context3, absolute = false) {
-  const cache = /* @__PURE__ */ new Map(), out = [];
-  for (const x of raw) {
-    let lines = cache.get(x.file);
-    if (!lines) {
-      try {
-        lines = (await readFile2(x.file, "utf8")).split(/\r\n|\r|\n/);
-      } catch {
-        continue;
-      }
-      cache.set(x.file, lines);
-    }
-    const i = x.line - 1;
-    out.push({ path: pathFor(root, x.file, absolute), line: x.line, text: lines[i] ?? x.text, before: lines.slice(Math.max(0, i - context3), i), after: lines.slice(i + 1, i + context3 + 1) });
+  if (source === "started" || source === "promoted") {
+    return "running";
   }
-  return out;
-}
-function globMatch(pattern, value) {
-  const p = normalizePath(pattern).replace(/^!/, "");
-  let source = "";
-  for (let i = 0; i < p.length; i++) {
-    const c = p[i];
-    if (c === "*" && p[i + 1] === "*") {
-      i++;
-      if (p[i + 1] === "/") {
-        i++;
-        source += "(?:.*/)?";
-      } else source += ".*";
-    } else if (c === "*") source += "[^/]*";
-    else if (c === "?") source += "[^/]";
-    else source += c.replace(/[.+^${}()|[\]\\]/g, "\\$&");
-  }
-  const r = new RegExp(`^${source}$`);
-  return r.test(value) || r.test(basename(value));
-}
-var defaultReadTextFile = (filePath) => readFile2(filePath, "utf8").catch(() => "");
-async function jsSearch(o, targetPath) {
-  const max4 = o.maxResults ?? Number.MAX_SAFE_INTEGER;
-  const excludes = o.exclude ?? [];
-  const readText = o.readTextFile ?? defaultReadTextFile;
-  const files = [];
-  const targetStat = await stat2(targetPath).catch(() => null);
-  if (!targetStat) return { matches: [], totalMatches: 0, truncated: false, engine: "js" };
-  const ignorePatterns = o.includeIgnored ? [] : await readRootGitignorePatterns(o.root);
-  const isIgnored = (rel) => ignorePatterns.some((pattern) => globMatch(pattern, rel));
-  const isSearchableFile = (filePath) => {
-    const rel = pathFor(o.root, filePath);
-    return !excludes.some((pattern) => globMatch(pattern, rel)) && !isIgnored(rel) && (!o.include || globMatch(o.include, rel));
-  };
-  if (targetStat.isFile()) {
-    if (isSearchableFile(targetPath)) files.push(targetPath);
-  } else {
-    const walk = async (dir) => {
-      for (const e of await readdir(dir, { withFileTypes: true })) {
-        const f = resolve2(dir, e.name), rel = pathFor(o.root, f);
-        if (e.isDirectory()) {
-          if (!excludes.some((p) => globMatch(p, rel))) await walk(f);
-        } else if (e.isFile() && !excludes.some((p) => globMatch(p, rel)) && !isIgnored(rel) && (!o.include || globMatch(o.include, rel))) {
-          files.push(f);
-        }
-      }
-    };
-    await walk(targetPath);
-  }
-  const matcher = o.regex ? new RegExp(o.query, o.caseSensitive === false ? "i" : "") : null;
-  const needle = o.caseSensitive === false ? o.query.toLowerCase() : o.query;
-  const out = [], context3 = o.contextLines ?? 0;
-  for (const file of files) {
-    const text = await readText(file);
-    if (!text || text.includes("\0")) continue;
-    const lines = text.split(/\r\n|\r|\n/);
-    for (let i = 0; i < lines.length; i++) {
-      const line = lines[i] ?? "";
-      const hit = matcher ? matcher.test(line) : o.caseSensitive === false ? line.toLowerCase().includes(needle) : line.includes(needle);
-      if (!hit) continue;
-      if (out.length >= max4) return { matches: out, totalMatches: max4, truncated: true, engine: "js" };
-      out.push({ path: pathFor(o.root, file, o.absolutePaths === true), line: i + 1, text: line, before: lines.slice(Math.max(0, i - context3), i), after: lines.slice(i + 1, i + context3 + 1) });
-    }
-  }
-  return { matches: out, totalMatches: out.length, truncated: false, engine: "js" };
-}
-var COMMAND_ENGINES = [
-  { engine: "ripgrep", binaryOption: "resolveRipgrepBinary", binaryName: "rg", argsKey: "rg" },
-  { engine: "grep", binaryOption: "resolveGrepBinary", binaryName: "grep", argsKey: "grep" }
-];
-async function searchFileTextMatches(o) {
-  const targetPath = resolve2(o.root, o.target || ".");
-  const targetStat = await stat2(targetPath).catch(() => null);
-  if (!targetStat) return { matches: [], totalMatches: 0, truncated: false, engine: "js" };
-  if (targetStat.isFile()) return jsSearch(o, targetPath);
-  const run2 = o.runCommand ?? runCommand, max4 = o.maxResults;
-  for (const entry of COMMAND_ENGINES) {
-    const injectedResolver = o[entry.binaryOption];
-    const binary = injectedResolver ? injectedResolver() : resolveExecutableOnPath(entry.binaryName);
-    if (!binary) continue;
-    const result4 = await run2(binary, commandArgs(o, entry.argsKey, o.target || "."), o.root, max4);
-    const raw = parseMatches(o.root, result4.stdout);
-    const hardFailed = result4.outcome.kind === "spawn-failed" || result4.outcome.kind === "completed" && result4.outcome.exitCode !== 0 && result4.outcome.exitCode !== 1;
-    if (hardFailed) continue;
-    const truncated = raw.length > (max4 ?? Number.MAX_SAFE_INTEGER);
-    const matches = await decorate(o.root, raw.slice(0, max4), o.contextLines ?? 0, o.absolutePaths === true);
-    return {
-      matches,
-      totalMatches: truncated ? matches.length : raw.length,
-      truncated,
-      engine: entry.engine
-    };
-  }
-  return jsSearch(o, targetPath);
-}
-
-// packages/agent-runtime/processTask.ts
-var PROCESS_TASK_TERMINAL_STATUSES = [
-  "stopped",
-  "exited",
-  "failed"
-];
-function isProcessTaskTerminalStatus(status) {
-  return typeof status === "string" && PROCESS_TASK_TERMINAL_STATUSES.includes(status);
-}
-function reportedTaskStatus(source, exitCode) {
-  if (source === "killed") {
-    return "stopped";
-  }
-  if (source === "exited") {
-    return exitCode !== void 0 && exitCode !== 0 ? "failed" : "exited";
-  }
-  if (source === "started" || source === "promoted") {
-    return "running";
-  }
-  return source;
+  return source;
 }
 var DEFAULT_TASK_EVENT_RETENTION_MS = 5 * 60 * 1e3;
 var DEFAULT_MAX_TASK_EVENTS_TASKS = 200;
@@ -14445,20 +14343,20 @@ var ProcessTaskEventLog = class {
 };
 
 // packages/agent-runtime/processRegistry.ts
-function toProcessTaskView(record) {
-  const capsule = record.resultCapsule;
+function toProcessTaskView(record2) {
+  const capsule = record2.resultCapsule;
   return {
-    taskId: record.taskId,
-    pid: record.pid,
-    pgid: record.pgid,
-    command: record.command,
-    label: record.label,
-    startedAt: record.startedAt,
-    status: record.status,
-    ...record.exitCode !== void 0 ? { exitCode: record.exitCode } : {},
-    persist: record.persist,
-    promoted: record.promoted,
-    transient: record.transient,
+    taskId: record2.taskId,
+    pid: record2.pid,
+    pgid: record2.pgid,
+    command: record2.command,
+    label: record2.label,
+    startedAt: record2.startedAt,
+    status: record2.status,
+    ...record2.exitCode !== void 0 ? { exitCode: record2.exitCode } : {},
+    persist: record2.persist,
+    promoted: record2.promoted,
+    transient: record2.transient,
     ...capsule?.durationMs !== void 0 ? { durationMs: capsule.durationMs } : {},
     ...capsule?.spill ? { outputRef: capsule.spill.displayPath } : {}
   };
@@ -14509,7 +14407,7 @@ var ProcessRegistry = class {
    * `started` event. Returns the stored record (with its stable taskId).
    */
   add(proc) {
-    const record = {
+    const record2 = {
       taskId: proc.taskId ?? mintTaskId(proc.pid),
       pid: proc.pid,
       pgid: proc.pgid,
@@ -14522,10 +14420,10 @@ var ProcessRegistry = class {
       transient: proc.transient ?? false,
       owner: proc.owner ?? null
     };
-    this.processes.set(proc.pid, record);
-    this.byTaskId.set(record.taskId, proc.pid);
-    this.eventLog.append({ taskId: record.taskId, pid: proc.pid, type: "started" });
-    return { ...record };
+    this.processes.set(proc.pid, record2);
+    this.byTaskId.set(record2.taskId, proc.pid);
+    this.eventLog.append({ taskId: record2.taskId, pid: proc.pid, type: "started" });
+    return { ...record2 };
   }
   list() {
     return Array.from(this.processes.values()).map((proc) => ({ ...proc }));
@@ -14775,28 +14673,7 @@ function buildProcessTaskResultCapsule(args2) {
   };
 }
 
-// packages/agent-runtime/processOwnership.ts
-var asNonEmptyString = (value) => {
-  if (typeof value !== "string") return null;
-  const trimmed = value.trim();
-  return trimmed ? trimmed : null;
-};
-function readProcessOwner(runtimeContext) {
-  if (!runtimeContext || typeof runtimeContext !== "object") return null;
-  const dialogId = asNonEmptyString(runtimeContext.dialogId) ?? asNonEmptyString(runtimeContext.parentThreadId);
-  if (!dialogId) return null;
-  const turnId = asNonEmptyString(runtimeContext.turnId);
-  const ownerId = asNonEmptyString(runtimeContext.ownerId);
-  return {
-    dialogId,
-    ...turnId ? { turnId } : {},
-    ...ownerId ? { ownerId } : {}
-  };
-}
-
 // packages/agent-runtime/workspaceShell.ts
-import { resolve as resolve3 } from "node:path";
-import { spawn as spawnChildProcess2 } from "node:child_process";
 var EXEC_SHELL_TIMEOUT_ENV = "NOLO_EXEC_SHELL_TIMEOUT_MS";
 var EXEC_SHELL_DETACH_ENV = "NOLO_EXEC_SHELL_DETACH_MS";
 var DEFAULT_EXEC_SHELL_DETACH_MS = 12e4;
@@ -14920,8 +14797,12 @@ function wrapPowerShellCommand(command, shellKind = "pwsh") {
     command
   ].join("; ");
 }
+var cachedPowerShellExecutable;
+var cachedBashExecutable;
 function findPowerShellExecutable() {
-  return resolveExecutableOnPath("pwsh") || resolveExecutableOnPath("powershell.exe") || resolveExecutableOnPath("powershell");
+  if (cachedPowerShellExecutable !== void 0) return cachedPowerShellExecutable;
+  cachedPowerShellExecutable = resolveExecutableOnPath("pwsh") || resolveExecutableOnPath("powershell.exe") || resolveExecutableOnPath("powershell");
+  return cachedPowerShellExecutable;
 }
 function buildPowerShellSpawnArgs(args2) {
   return [
@@ -14935,14 +14816,23 @@ function buildPowerShellSpawnArgs(args2) {
     wrapPowerShellCommand(args2.command, resolvePowerShellShellKind(args2.executable))
   ];
 }
-function buildBashCommand(command) {
-  const executable = resolveExecutableOnPath("bash") || resolveExecutableOnPath("sh");
-  if (!executable) throw new Error("bash/sh is not available on this machine.");
-  return [executable, "-lc", command];
+function resolveShellLoginMode() {
+  if (process.env.NOLO_SHELL_LOGIN_MODE === "login" || process.env.NOLO_LOGIN_SHELL === "1") {
+    return "login";
+  }
+  return "fast";
+}
+function buildBashCommand(command, options) {
+  if (cachedBashExecutable === void 0) {
+    cachedBashExecutable = resolveExecutableOnPath("bash") || resolveExecutableOnPath("sh");
+  }
+  if (!cachedBashExecutable) throw new Error("bash/sh is not available on this machine.");
+  const isLogin = options?.login ?? resolveShellLoginMode() === "login";
+  return [cachedBashExecutable, isLogin ? "-lc" : "-c", command];
 }
 function buildWorkspaceShellPlan(args2) {
   if (args2.shell === "bash") {
-    const argv2 = buildBashCommand(args2.command);
+    const argv2 = buildBashCommand(args2.command, { login: args2.login });
     return { argv: argv2, resolvedShell: "bash", executable: argv2[0] ?? "bash" };
   }
   if (args2.shell === "powershell" || process.platform === "win32") {
@@ -14955,7 +14845,7 @@ function buildWorkspaceShellPlan(args2) {
       shellKind: resolvePowerShellShellKind(executable)
     };
   }
-  const argv = buildBashCommand(args2.command);
+  const argv = buildBashCommand(args2.command, { login: args2.login });
   return { argv, resolvedShell: "bash", executable: argv[0] ?? "bash" };
 }
 function buildWorkspaceShellCommand(args2) {
@@ -15100,13 +14990,13 @@ function readNodeStream(stream, maxBytes = DEFAULT_MAX_STREAM_BUFFER_BYTES) {
     const finalize2 = (truncated = false) => {
       if (settled) return;
       settled = true;
-      let text = Buffer.concat(chunks2).toString("utf8");
+      let text2 = Buffer.concat(chunks2).toString("utf8");
       if (truncated) {
-        text += `
+        text2 += `
 
 [stream pipe truncated: output exceeded ${formatLimit} buffer limit]`;
       }
-      resolveStream(text);
+      resolveStream(text2);
     };
     stream.on("data", (chunk) => {
       if (settled) return;
@@ -15192,8 +15082,8 @@ async function runWorkspaceCommand(args2) {
     ...args2.commandPrefix ?? [],
     ...args2.command
   ];
-  const proc = spawnChildProcess2(command[0] ?? "", command.slice(1), {
-    cwd: resolve3(args2.workspaceRoot),
+  const proc = spawnChildProcess(command[0] ?? "", command.slice(1), {
+    cwd: resolve(args2.workspaceRoot),
     stdio: [
       args2.stdin === void 0 ? "ignore" : "pipe",
       "pipe",
@@ -15407,25 +15297,495 @@ Use listProcesses to inspect or stop it.`,
 ` : ""}command timed out after ${timeoutMs ?? "unknown"}ms
 ` : rawStderr;
   return {
-    stdout,
-    stderr,
-    exitCode,
-    timedOut,
-    aborted,
-    content: truncateToolOutput(
-      [
-        stdout.trim() ? `stdout:
-${stdout.trim()}` : "",
-        stderr.trim() ? `stderr:
-${stderr.trim()}` : "",
-        `exitCode: ${exitCode}`
-      ].filter(Boolean).join("\n\n"),
-      args2.outputLimit,
-      {
-        toolName: "execShell",
-        workspaceRoot: args2.workspaceRoot
-      }
-    )
+    stdout,
+    stderr,
+    exitCode,
+    timedOut,
+    aborted,
+    content: truncateToolOutput(
+      [
+        stdout.trim() ? `stdout:
+${stdout.trim()}` : "",
+        stderr.trim() ? `stderr:
+${stderr.trim()}` : "",
+        `exitCode: ${exitCode}`
+      ].filter(Boolean).join("\n\n"),
+      args2.outputLimit,
+      {
+        toolName: "execShell",
+        workspaceRoot: args2.workspaceRoot
+      }
+    )
+  };
+}
+
+// packages/agent-runtime/capabilities/execShellCapability.ts
+function buildExecShellToolDefinition(toolName = "execShell") {
+  return {
+    type: "function",
+    function: {
+      name: toolName,
+      description: `Execute a shell command from the workspace root. Prefer one compound command (e.g. 'git status && git diff --stat') to perform complete verification in one step instead of multiple small roundtrips. Do not cd into guessed paths; commands already run from the workspace root. Commands block until exit. Long-running commands (sleep over ${IMMEDIATE_DETACH_SLEEP_THRESHOLD_SECONDS}s, dev servers, watchers) automatically detach to background returning {detached: true, pid, label}; for persistent services, prefer launchProcess. On Windows the resolved shell may be Windows PowerShell 5.1 (metadata.shellKind="powershell5"): it does not support '&&'/'||' or $PSStyle \u2014 join commands with ';' or split into multiple calls. metadata.shellKind="pwsh" means PowerShell 7+ with full syntax. Read resolvedShell/shellKind from any execShell result before writing Windows-specific syntax. LIFECYCLE CONTRACT (misreading this contract silenced a real dialog for 10 hours): (1) A normal command waits synchronously for at most 120 seconds; if it ends inside that window the call IS finished \u2014 a result containing exitCode means the command has already completed, never "still running"; parse it immediately (no later event will remind you). (2) Only a result with metadata.detached === true AND a taskId represents a tracked background task that may trigger completion wake-up (terminal completion turn carrying a bounded result capsule); that handle may be waited on with taskWait and will produce a completion notification (a launchProcess taskId only yields a notice on your next real turn, never a new turn). (3) Text the command itself prints (LAUNCHED, STARTED, BACKGROUND, ...) is plain stdout with zero lifecycle meaning \u2014 never read it as a platform receipt. (4) Shell-level backgrounding (\`&\`, nohup, disown, setsid, self-daemonizing scripts, PowerShell Start-Process) is NOT tracked: those descendants produce no completion notification, and the outer shell finishing tells you nothing about them. Use background: true to turn a finite job into a tracked background task immediately. When a synchronous result's core output was redirected to a file, read that file in the SAME turn ("read it later" means it is lost) \u2014 never end the turn promising a later automatic report without a taskId.`,
+      parameters: {
+        type: "object",
+        properties: {
+          command: {
+            type: "string",
+            description: "Shell command to run (non-empty)."
+          },
+          cmd: {
+            type: "string",
+            description: "Compatibility alias for command."
+          },
+          background: {
+            type: "boolean",
+            description: "Immediately detach this command into a tracked background task (no 120s synchronous wait): returns {detached: true, taskId}, and on completion the platform resumes this conversation with a bounded result capsule (exitCode, duration, stdout/stderr tail). Default false. Use for finite jobs (tests, builds, batch) whose result you need later; NOT for dev servers/watchers \u2014 use launchProcess for those."
+          }
+        }
+      }
+    }
+  };
+}
+function normalizeExecShellInput(input) {
+  if (input === null || input === void 0) {
+    throw new Error("execShell requires a non-empty command.");
+  }
+  if (typeof input === "string") {
+    const trimmed = input.trim();
+    if (!trimmed) {
+      throw new Error("execShell requires a non-empty command.");
+    }
+    if (trimmed.startsWith("{") && trimmed.endsWith("}")) {
+      try {
+        const parsed = JSON.parse(trimmed);
+        if (parsed && typeof parsed === "object") {
+          return normalizeExecShellInput(parsed);
+        }
+      } catch {
+      }
+    }
+    return { command: trimmed };
+  }
+  if (typeof input === "object") {
+    const record2 = input;
+    let rawCommand = resolveShellCommandArg(record2);
+    if (typeof rawCommand !== "string" || !rawCommand.trim()) {
+      const fallback = record2.command ?? record2.cmd;
+      if (typeof fallback === "string" && fallback.trim()) {
+        rawCommand = fallback;
+      }
+    }
+    const command = typeof rawCommand === "string" ? rawCommand.trim() : "";
+    if (!command) {
+      throw new Error("execShell requires a non-empty command.");
+    }
+    const activity = extractActivity(record2);
+    const background = record2.background === true || typeof record2.background === "string" && record2.background.trim().toLowerCase() === "true";
+    const login = typeof record2.login === "boolean" ? record2.login : typeof record2.login === "string" ? record2.login.trim().toLowerCase() === "true" : void 0;
+    return {
+      command,
+      ...record2.shell !== void 0 ? { shell: record2.shell } : {},
+      ...login !== void 0 ? { login } : {},
+      ...activity ? { activity } : {},
+      ...record2.input !== void 0 ? { input: record2.input } : {},
+      ...background ? { background: true } : {}
+    };
+  }
+  throw new Error("execShell requires a non-empty command.");
+}
+function execShellExecutionBinding(input, ctx) {
+  return JSON.stringify({
+    input,
+    workspaceRoot: ctx.workspaceRoot || process.cwd(),
+    commandTimeoutMs: ctx.commandTimeoutMs,
+    commandOutputLimit: ctx.commandOutputLimit,
+    commandPrefix: ctx.commandPrefix,
+    restrictToWorkspace: ctx.restrictToWorkspace,
+    detachMs: ctx.detachMs,
+    owner: ctx.owner,
+    confirmed: ctx.confirmed,
+    enableDestructiveShellGuard: ctx.enableDestructiveShellGuard,
+    blockDestructiveWithoutConfirmation: ctx.blockDestructiveWithoutConfirmation,
+    envDigest: createHash3("sha256").update(JSON.stringify(process.env)).digest("hex")
+  });
+}
+var execShellCapability = {
+  name: "execShell",
+  getToolDefinition(toolName = "execShell") {
+    return buildExecShellToolDefinition(toolName);
+  },
+  normalizeInput(input) {
+    return normalizeExecShellInput(input);
+  },
+  async invoke(ctx, normalized) {
+    const workspaceRoot = ctx.workspaceRoot || process.cwd();
+    const command = normalized.command;
+    if (ctx.restrictToWorkspace) {
+      const escapeToken = findWorkspaceShellEscapeToken(command);
+      if (escapeToken) {
+        return buildWorkspaceShellEscapeBlockedResult({ command, token: escapeToken });
+      }
+    }
+    const interactiveAuthCommand = extractInteractiveGhAuthCommand(command);
+    if (interactiveAuthCommand) {
+      const blocked = buildInteractiveCommandBlockedResult(interactiveAuthCommand);
+      return {
+        ...blocked,
+        metadata: {
+          ...blocked.metadata,
+          ...normalized.activity ? { activity: normalized.activity } : {}
+        }
+      };
+    }
+    const shellPlan = buildWorkspaceShellPlan({
+      toolName: "execShell",
+      command,
+      shell: normalized.shell,
+      ...typeof normalized.login === "boolean" ? { login: normalized.login } : {}
+    });
+    const background = normalized.background === true;
+    const executionArgs = {
+      workspaceRoot,
+      command: shellPlan.argv,
+      timeoutMs: resolveExecShellTimeoutMs(ctx.commandTimeoutMs),
+      outputLimit: ctx.commandOutputLimit,
+      commandPrefix: ctx.commandPrefix,
+      abortSignal: ctx.abortSignal,
+      detachMs: background ? 0 : isImmediateDetachShellCommand({ command }) ? 0 : ctx.detachMs,
+      stdin: typeof normalized.input === "string" ? normalized.input : void 0,
+      // Ownership of the turn that invoked this command: an auto-detached
+      // command keeps its parent dialog so its terminal can resume that
+      // conversation (see processOwnership.ts). Absent ctx.owner = unowned.
+      owner: ctx.owner ?? null
+    };
+    const authority = ctx.execShellApproval;
+    if (authority) {
+      const binding = execShellExecutionBinding(normalized, ctx);
+      const payload = JSON.stringify({ binding, executionArgs });
+      const signal = ctx.abortSignal;
+      const consume = authority.consume;
+      const ticket = await authority.request(payload);
+      if (ctx.execShellApproval !== authority || ctx.abortSignal !== signal || signal?.aborted || execShellExecutionBinding(normalized, ctx) !== binding || JSON.stringify({ binding, executionArgs }) !== payload) {
+        throw new Error("Shell approval final input changed");
+      }
+      if (authority.consume !== consume) throw new Error("Shell approval authority changed");
+      consume.call(authority, ticket, payload);
+    }
+    const result4 = await runWorkspaceCommand(executionArgs);
+    const warnings = result4.detached || result4.spawnFailed ? [] : detectExecShellSynchronousWarnings(command, {
+      resolvedShell: shellPlan.resolvedShell
+    });
+    return {
+      content: warnings.length > 0 ? [result4.content, ...warnings.map((warning) => warning.message)].join("\n\n") : result4.content,
+      metadata: {
+        command,
+        exitCode: result4.exitCode,
+        timedOut: result4.timedOut,
+        resolvedShell: shellPlan.resolvedShell,
+        ...shellPlan.shellKind ? { shellKind: shellPlan.shellKind } : {},
+        ...result4.aborted ? { aborted: true } : {},
+        ...result4.detached ? {
+          detached: true,
+          pid: result4.pid,
+          label: result4.label,
+          // Phase 0: stable taskId from the pre-registered Execution
+          // Envelope (additive; existing detached fields untouched).
+          taskId: result4.taskId,
+          status: "running",
+          // P0 machine-readable execution state: an explicit positive
+          // signal instead of requiring the model to infer "not detached"
+          // from absence. Mirrors the real lifecycle contract.
+          executionState: "detached",
+          trackedBackgroundTask: true,
+          completionNotification: "terminal-resume"
+        } : {
+          // P0 machine-readable execution state: the command already
+          // finished inside the synchronous window; no background task
+          // exists, so no completion notification will ever arrive.
+          executionState: "synchronous-complete",
+          trackedBackgroundTask: false,
+          completionNotification: "none"
+        },
+        ...normalized.activity ? { activity: normalized.activity } : {}
+      }
+    };
+  }
+};
+
+// packages/agent-runtime/capabilities/capabilitySdk.ts
+var BUILTIN_CAPABILITIES = [
+  execShellCapability
+];
+async function invokeCapability(capabilityOrName, input, ctx = {}) {
+  const capability = typeof capabilityOrName === "string" ? BUILTIN_CAPABILITIES.find((c) => c.name === capabilityOrName) : capabilityOrName;
+  if (!capability) {
+    throw new Error(`Capability "${String(capabilityOrName)}" not found.`);
+  }
+  const normalizedInput = capability.normalizeInput(input);
+  const authority = ctx.execShellApproval;
+  const binding = authority && capability.name === "execShell" ? execShellExecutionBinding(normalizedInput, ctx) : void 0;
+  const signal = ctx.abortSignal;
+  const confirm = ctx.confirmDestructiveAction;
+  await evaluateCapabilityPolicy(capability, normalizedInput, ctx);
+  if (ctx.onInvoke) {
+    await ctx.onInvoke(capability.name, normalizedInput);
+  }
+  if (binding !== void 0 && (ctx.execShellApproval !== authority || ctx.abortSignal !== signal || ctx.confirmDestructiveAction !== confirm || signal?.aborted || execShellExecutionBinding(normalizedInput, ctx) !== binding)) {
+    throw new Error("Shell approval input changed during policy/hook");
+  }
+  return capability.invoke(ctx, normalizedInput);
+}
+
+// packages/agent-runtime/localWorkspaceTools.ts
+import { existsSync as existsSync3 } from "node:fs";
+import { createHash as createHash4 } from "node:crypto";
+import { lstat, mkdir, readdir as readdir2, readFile as readFile3, realpath, stat as stat3, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, isAbsolute as isAbsolute2, relative as relative3, resolve as resolve4, sep } from "node:path";
+import { spawn as spawnChildProcess3 } from "node:child_process";
+
+// packages/core/readRangeLedger.ts
+function filterRetainedLedgerRecords(records, retainedCap) {
+  return records.filter((record2) => record2.chars <= retainedCap);
+}
+function isValidRange(range3) {
+  return Number.isInteger(range3.startLine) && Number.isInteger(range3.endLine) && range3.endLine >= range3.startLine;
+}
+function mergeLineRanges(ranges) {
+  const sorted = ranges.filter(isValidRange).slice().sort((a, b) => a.startLine - b.startLine);
+  const merged = [];
+  for (const range3 of sorted) {
+    const last = merged[merged.length - 1];
+    if (last && range3.startLine <= last.endLine + 1) {
+      last.endLine = Math.max(last.endLine, range3.endLine);
+    } else {
+      merged.push({ startLine: range3.startLine, endLine: range3.endLine });
+    }
+  }
+  return merged;
+}
+function isLineRangeCovered(request3, covered) {
+  if (!isValidRange(request3)) return false;
+  let open = request3.startLine;
+  for (const range3 of mergeLineRanges(covered)) {
+    if (range3.endLine < open) continue;
+    if (range3.startLine > open) return false;
+    open = range3.endLine + 1;
+    if (open > request3.endLine) return true;
+  }
+  return open > request3.endLine;
+}
+
+// packages/agent-runtime/fileTextSearch.ts
+import { readdir, readFile as readFile2, stat as stat2 } from "node:fs/promises";
+import { basename, relative as relative2, resolve as resolve3 } from "node:path";
+import { spawn as spawnChildProcess2 } from "node:child_process";
+
+// packages/agent-runtime/gitignore.ts
+import { readFile, stat } from "node:fs/promises";
+import { resolve as resolve2 } from "node:path";
+async function readRootGitignorePatterns(workspaceRoot) {
+  const content = await readFile(resolve2(workspaceRoot, ".gitignore"), "utf8").catch(() => null);
+  if (content === null) return [];
+  return content.split(/\r?\n/).map((line) => line.trim()).filter((line) => line && !line.startsWith("#") && !line.startsWith("!")).flatMap((line) => {
+    const unanchored = line.replace(/^\//, "");
+    if (unanchored.endsWith("/")) return [`${unanchored}**`];
+    if (unanchored.includes("**")) return [unanchored];
+    return [unanchored, `${unanchored}/**`];
+  });
+}
+async function hasRootGitignore(workspaceRoot) {
+  try {
+    await stat(resolve2(workspaceRoot, ".gitignore"));
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// packages/agent-runtime/fileTextSearch.ts
+var normalizePath = (value) => value.replaceAll("\\", "/");
+var pathFor = (root, file, absolute = false) => absolute ? normalizePath(file) : normalizePath(relative2(root, file) || basename(file));
+var COMMAND_LIMIT_HEADROOM = 1;
+async function runCommand(binary, args2, cwd, maxResults) {
+  const recordLimit = maxResults === void 0 ? 0 : Math.max(0, maxResults) + COMMAND_LIMIT_HEADROOM;
+  return await new Promise((done4) => {
+    let stdout = "", stderr = "", recordCount = 0, stopped = false;
+    try {
+      const child = spawnChildProcess2(binary, args2, { cwd, stdio: ["ignore", "pipe", "pipe"] });
+      child.stdout.on("data", (chunk) => {
+        stdout += chunk.toString();
+        recordCount = parseMatches(cwd, stdout).length;
+        if (recordLimit > 0 && recordCount >= recordLimit && !stopped) {
+          stopped = true;
+          child.kill();
+        }
+      });
+      child.stderr.on("data", (chunk) => {
+        stderr += chunk.toString();
+      });
+      child.on("error", () => done4({ stdout, stderr, outcome: { kind: "spawn-failed" } }));
+      child.on("close", (exitCode) => done4({ stdout, stderr, outcome: stopped ? { kind: "stopped-by-limit" } : { kind: "completed", exitCode } }));
+    } catch {
+      done4({ stdout, stderr, outcome: { kind: "spawn-failed" } });
+    }
+  });
+}
+function commandArgs(o, binary, target) {
+  const args2 = binary === "rg" ? ["--line-number", "--no-heading", "--color", "never", "--null"] : ["-RIn", "--binary-files=without-match", "--null"];
+  if (binary === "rg") args2.push("--no-require-git");
+  if (o.regex !== true) args2.push(binary === "rg" ? "--fixed-strings" : "-F");
+  else if (binary === "grep") args2.push("-E");
+  if (o.caseSensitive === false) args2.push("-i");
+  if (binary === "rg") {
+    if (o.includeIgnored) args2.push("--no-ignore");
+    for (const x of o.exclude ?? []) args2.push("--glob", `!${x}`);
+    if (o.include) args2.push("--glob", o.include);
+  } else {
+    for (const x of o.exclude ?? []) {
+      const clean = x.replace(/\/\*\*$/, "");
+      if (clean && !clean.includes("/")) args2.push("--exclude-dir", clean);
+    }
+    if (o.include) args2.push("--include", o.include);
+  }
+  args2.push("--", o.query, target);
+  return args2;
+}
+function parseMatches(root, output) {
+  const records = [];
+  const pattern = /(?:^|\n)([^\0\n]+)\0(\d+):(.*?)(?=\n[^\0\n]+\0|$)/gs;
+  for (const match7 of output.matchAll(pattern)) {
+    records.push({ file: resolve3(root, match7[1] ?? ""), line: Number(match7[2]), text: (match7[3] ?? "").replace(/\n$/, "") });
+  }
+  return records;
+}
+async function decorate(root, raw, context3, absolute = false) {
+  const cache = /* @__PURE__ */ new Map(), out = [];
+  for (const x of raw) {
+    let lines = cache.get(x.file);
+    if (!lines) {
+      try {
+        lines = (await readFile2(x.file, "utf8")).split(/\r\n|\r|\n/);
+      } catch {
+        continue;
+      }
+      cache.set(x.file, lines);
+    }
+    const i = x.line - 1;
+    out.push({ path: pathFor(root, x.file, absolute), line: x.line, text: lines[i] ?? x.text, before: lines.slice(Math.max(0, i - context3), i), after: lines.slice(i + 1, i + context3 + 1) });
+  }
+  return out;
+}
+function globMatch(pattern, value) {
+  const p = normalizePath(pattern).replace(/^!/, "");
+  let source = "";
+  for (let i = 0; i < p.length; i++) {
+    const c = p[i];
+    if (c === "*" && p[i + 1] === "*") {
+      i++;
+      if (p[i + 1] === "/") {
+        i++;
+        source += "(?:.*/)?";
+      } else source += ".*";
+    } else if (c === "*") source += "[^/]*";
+    else if (c === "?") source += "[^/]";
+    else source += c.replace(/[.+^${}()|[\]\\]/g, "\\$&");
+  }
+  const r = new RegExp(`^${source}$`);
+  return r.test(value) || r.test(basename(value));
+}
+var defaultReadTextFile = (filePath) => readFile2(filePath, "utf8").catch(() => "");
+async function jsSearch(o, targetPath) {
+  const max4 = o.maxResults ?? Number.MAX_SAFE_INTEGER;
+  const excludes = o.exclude ?? [];
+  const readText = o.readTextFile ?? defaultReadTextFile;
+  const files = [];
+  const targetStat = await stat2(targetPath).catch(() => null);
+  if (!targetStat) return { matches: [], totalMatches: 0, truncated: false, engine: "js" };
+  const ignorePatterns = o.includeIgnored ? [] : await readRootGitignorePatterns(o.root);
+  const isIgnored = (rel) => ignorePatterns.some((pattern) => globMatch(pattern, rel));
+  const isSearchableFile = (filePath) => {
+    const rel = pathFor(o.root, filePath);
+    return !excludes.some((pattern) => globMatch(pattern, rel)) && !isIgnored(rel) && (!o.include || globMatch(o.include, rel));
+  };
+  if (targetStat.isFile()) {
+    if (isSearchableFile(targetPath)) files.push(targetPath);
+  } else {
+    const walk = async (dir) => {
+      for (const e of await readdir(dir, { withFileTypes: true })) {
+        const f = resolve3(dir, e.name), rel = pathFor(o.root, f);
+        if (e.isDirectory()) {
+          if (!excludes.some((p) => globMatch(p, rel))) await walk(f);
+        } else if (e.isFile() && !excludes.some((p) => globMatch(p, rel)) && !isIgnored(rel) && (!o.include || globMatch(o.include, rel))) {
+          files.push(f);
+        }
+      }
+    };
+    await walk(targetPath);
+  }
+  const matcher = o.regex ? new RegExp(o.query, o.caseSensitive === false ? "i" : "") : null;
+  const needle = o.caseSensitive === false ? o.query.toLowerCase() : o.query;
+  const out = [], context3 = o.contextLines ?? 0;
+  for (const file of files) {
+    const text2 = await readText(file);
+    if (!text2 || text2.includes("\0")) continue;
+    const lines = text2.split(/\r\n|\r|\n/);
+    for (let i = 0; i < lines.length; i++) {
+      const line = lines[i] ?? "";
+      const hit = matcher ? matcher.test(line) : o.caseSensitive === false ? line.toLowerCase().includes(needle) : line.includes(needle);
+      if (!hit) continue;
+      if (out.length >= max4) return { matches: out, totalMatches: max4, truncated: true, engine: "js" };
+      out.push({ path: pathFor(o.root, file, o.absolutePaths === true), line: i + 1, text: line, before: lines.slice(Math.max(0, i - context3), i), after: lines.slice(i + 1, i + context3 + 1) });
+    }
+  }
+  return { matches: out, totalMatches: out.length, truncated: false, engine: "js" };
+}
+var COMMAND_ENGINES = [
+  { engine: "ripgrep", binaryOption: "resolveRipgrepBinary", binaryName: "rg", argsKey: "rg" },
+  { engine: "grep", binaryOption: "resolveGrepBinary", binaryName: "grep", argsKey: "grep" }
+];
+async function searchFileTextMatches(o) {
+  const targetPath = resolve3(o.root, o.target || ".");
+  const targetStat = await stat2(targetPath).catch(() => null);
+  if (!targetStat) return { matches: [], totalMatches: 0, truncated: false, engine: "js" };
+  if (targetStat.isFile()) return jsSearch(o, targetPath);
+  const run2 = o.runCommand ?? runCommand, max4 = o.maxResults;
+  for (const entry of COMMAND_ENGINES) {
+    const injectedResolver = o[entry.binaryOption];
+    const binary = injectedResolver ? injectedResolver() : resolveExecutableOnPath(entry.binaryName);
+    if (!binary) continue;
+    const result4 = await run2(binary, commandArgs(o, entry.argsKey, o.target || "."), o.root, max4);
+    const raw = parseMatches(o.root, result4.stdout);
+    const hardFailed = result4.outcome.kind === "spawn-failed" || result4.outcome.kind === "completed" && result4.outcome.exitCode !== 0 && result4.outcome.exitCode !== 1;
+    if (hardFailed) continue;
+    const truncated = raw.length > (max4 ?? Number.MAX_SAFE_INTEGER);
+    const matches = await decorate(o.root, raw.slice(0, max4), o.contextLines ?? 0, o.absolutePaths === true);
+    return {
+      matches,
+      totalMatches: truncated ? matches.length : raw.length,
+      truncated,
+      engine: entry.engine
+    };
+  }
+  return jsSearch(o, targetPath);
+}
+
+// packages/agent-runtime/processOwnership.ts
+var asNonEmptyString = (value) => {
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  return trimmed ? trimmed : null;
+};
+function readProcessOwner(runtimeContext) {
+  if (!runtimeContext || typeof runtimeContext !== "object") return null;
+  const dialogId = asNonEmptyString(runtimeContext.dialogId) ?? asNonEmptyString(runtimeContext.parentThreadId);
+  if (!dialogId) return null;
+  const turnId = asNonEmptyString(runtimeContext.turnId);
+  const ownerId = asNonEmptyString(runtimeContext.ownerId);
+  return {
+    dialogId,
+    ...turnId ? { turnId } : {},
+    ...ownerId ? { ownerId } : {}
   };
 }
 
@@ -15434,20 +15794,34 @@ var TASK_WAIT_DEFAULT_TIMEOUT_MS = 5 * 6e4;
 var TASK_WAIT_MAX_TIMEOUT_MS = 5 * 6e4;
 var TASK_WAIT_POLL_INTERVAL_MS = 250;
 var TASK_STOP_GRACE_MS = 2e3;
+function resolveCleanupReport(evidence, previousStatus) {
+  const diagnostic = evidence.diagnostic ? { diagnostic: evidence.diagnostic } : {};
+  if (evidence.confirmedStopped) {
+    return { status: "stopped", pending: false };
+  }
+  if (evidence.alreadyTerminal) {
+    const status = previousStatus ?? "stopped";
+    return { status, pending: status === "stop-unverified", idempotent: true, ...diagnostic };
+  }
+  if (evidence.ttlExpired) {
+    return { status: "expired", pending: false, ...diagnostic };
+  }
+  return { status: "stop-unverified", pending: true, ...diagnostic };
+}
 var TERMINAL_EVENT_TYPES = /* @__PURE__ */ new Set(["exited", "killed"]);
 function defaultSleep(ms) {
-  return new Promise((resolve5) => setTimeout(resolve5, ms));
+  return new Promise((resolve6) => setTimeout(resolve6, ms));
 }
 function defaultSignalSender(pid, signal) {
   process.kill(pid, signal);
 }
-function statusOf(record) {
-  return reportedTaskStatus(record.status, record.exitCode);
+function statusOf(record2) {
+  return reportedTaskStatus(record2.status, record2.exitCode);
 }
 function inspectTask(registry2, taskId) {
-  const record = registry2.getByTaskId(taskId);
+  const record2 = registry2.getByTaskId(taskId);
   const hasEvents = registry2.hasTaskEvents(taskId);
-  return { record, hasEvents, known: hasEvents || record !== void 0 };
+  return { record: record2, hasEvents, known: hasEvents || record2 !== void 0 };
 }
 function notFoundDetail(taskId) {
   return `No task ${taskId} is known: it was never started, or both its envelope and its event trail have been dropped. Call tasks to list current handles.`;
@@ -15489,13 +15863,13 @@ async function runTaskWait(args2) {
   for (let poll2 = 0; poll2 < maxPolls; poll2 += 1) {
     const events = registry2.getTaskEvents(taskId, 0);
     if (!registry2.hasTaskEvents(taskId)) {
-      const record = registry2.getByTaskId(taskId);
+      const record2 = registry2.getByTaskId(taskId);
       return {
         outcome: "evicted",
         taskId,
         cursor: 0,
         events: [],
-        ...record ? { status: statusOf(record) } : {},
+        ...record2 ? { status: statusOf(record2) } : {},
         detail: evictedDetail(taskId)
       };
     }
@@ -15540,7 +15914,7 @@ function runTaskLogs(args2) {
   const { registry: registry2, taskId } = args2;
   const cursorRaw = typeof args2.cursor === "number" ? args2.cursor : typeof args2.cursor === "string" && args2.cursor.trim() !== "" ? Number(args2.cursor) : Number.NaN;
   const cursor = Number.isFinite(cursorRaw) && cursorRaw > 0 ? Math.floor(cursorRaw) : 0;
-  const { record, hasEvents, known } = inspectTask(registry2, taskId);
+  const { record: record2, hasEvents, known } = inspectTask(registry2, taskId);
   if (!known) {
     return { outcome: "not-found", taskId, detail: notFoundDetail(taskId) };
   }
@@ -15550,14 +15924,14 @@ function runTaskLogs(args2) {
       taskId,
       cursor: 0,
       events: [],
-      ...record ? { status: statusOf(record) } : {},
+      ...record2 ? { status: statusOf(record2) } : {},
       detail: evictedDetail(taskId)
     };
   }
   const events = registry2.getTaskEvents(taskId, cursor);
   const allEvents = registry2.getTaskEvents(taskId, 0);
   const terminal = lastTerminalEvent(allEvents);
-  const status = terminal ? reportedTaskStatus(terminal.type, terminal.exitCode) : record ? statusOf(record) : "running";
+  const status = terminal ? reportedTaskStatus(terminal.type, terminal.exitCode) : record2 ? statusOf(record2) : "running";
   return {
     outcome: "ok",
     taskId,
@@ -15576,410 +15950,106 @@ function formatTaskLogsContent(result4, options) {
     const spill = spillToolOutput({
       content: full,
       toolName: "taskLogs",
-      workspaceRoot: options?.workspaceRoot
-    });
-    const omitted = result4.outcome === "ok" ? result4.events.length : 0;
-    const head3 = JSON.stringify({
-      ...result4,
-      events: [],
-      eventsOmitted: omitted,
-      logRef: spill.displayPath
-    });
-    return {
-      content: `${head3}${formatToolOverflowMarker({
-        spillRef: spill.displayPath,
-        totalChars: spill.totalChars,
-        totalLines: spill.totalLines,
-        omittedChars: Math.max(0, full.length - head3.length),
-        toolName: "taskLogs"
-      })}`.trimEnd(),
-      logRef: spill.displayPath
-    };
-  } catch {
-    return { content: truncateToolOutput(full, effectiveLimit) };
-  }
-}
-function isProcessGroupAlive(pgid, kill = defaultSignalSender) {
-  try {
-    kill(-pgid, 0);
-    return true;
-  } catch (error) {
-    return error.code === "EPERM";
-  }
-}
-async function runTaskStop(args2) {
-  const { registry: registry2, taskId } = args2;
-  const sleep3 = args2.sleep ?? defaultSleep;
-  const kill = args2.kill ?? defaultSignalSender;
-  const graceMs = Math.max(0, args2.graceMs ?? TASK_STOP_GRACE_MS);
-  const record = registry2.getByTaskId(taskId);
-  if (!record) {
-    return { outcome: "not-found", taskId, detail: notFoundDetail(taskId) };
-  }
-  const termed = registry2.kill(record.pid, "SIGTERM");
-  if (!termed) {
-    const reason = record.transient ? "transient-foreground" : record.status !== "running" ? "already-terminal" : "kill-refused";
-    const detail = reason === "transient-foreground" ? `${taskId} is a foreground command still inside its grace window, not a background task; its lifecycle belongs to the running execShell call.` : reason === "already-terminal" ? `${taskId} is already ${statusOf(record)}; nothing to stop.` : `Registry refused to stop ${taskId}.`;
-    return {
-      outcome: "not-stoppable",
-      taskId,
-      pid: record.pid,
-      status: statusOf(record),
-      reason,
-      detail
-    };
-  }
-  if (graceMs > 0) await sleep3(graceMs);
-  if (!isProcessGroupAlive(record.pgid, kill)) {
-    return {
-      outcome: "stopped",
-      taskId,
-      pid: record.pid,
-      status: reportedTaskStatus("killed"),
-      signal: "SIGTERM",
-      escalated: false
-    };
-  }
-  try {
-    kill(-record.pgid, "SIGKILL");
-  } catch {
-  }
-  return {
-    outcome: "stopped",
-    taskId,
-    pid: record.pid,
-    status: reportedTaskStatus("killed"),
-    signal: "SIGKILL",
-    escalated: true
-  };
-}
-function runTasks(args2) {
-  const tasks = args2.registry.listBackground().map((record) => ({
-    taskId: record.taskId,
-    pid: record.pid,
-    label: record.label,
-    status: statusOf(record),
-    startedAt: record.startedAt,
-    persist: record.persist
-  }));
-  return { tasks, count: tasks.length };
-}
-
-// packages/agent-runtime/execShellCompletionWarnings.ts
-var BG_ESCAPE_WORD_PATTERN = /(?:^|[\s;|(&/\\])(nohup|disown|setsid|start-process)(?=$|[\s;|)&])/i;
-var SHELL_SPLIT_CHARS = /* @__PURE__ */ new Set([";", "|", "&", "(", ")", "<", ">", "\n", "	", " "]);
-function maskQuotedAndEscaped(command) {
-  const out = Array.from(command);
-  let quote = null;
-  for (let i = 0; i < out.length; i += 1) {
-    const ch = out[i];
-    if (quote) {
-      out[i] = " ";
-      if (ch === "\\" && quote !== "'") {
-        if (i + 1 < out.length) out[i + 1] = " ";
-        i += 1;
-      } else if (ch === quote) {
-        quote = null;
-      }
-      continue;
-    }
-    if (ch === "\\") {
-      out[i] = " ";
-      if (i + 1 < out.length) out[i + 1] = " ";
-      i += 1;
-      continue;
-    }
-    if (ch === "'" || ch === '"' || ch === "`") {
-      quote = ch;
-      out[i] = " ";
-      continue;
-    }
-    if (ch === "#" && (i === 0 || /[\s;]/.test(out[i - 1] ?? " "))) {
-      while (i < out.length && out[i] !== "\n") {
-        out[i] = " ";
-        i += 1;
-      }
-    }
-  }
-  return out.join("");
-}
-function readRedirectTarget(original, start) {
-  let i = start;
-  while (i < original.length && /\s/.test(original[i] ?? "")) {
-    i += 1;
-  }
-  if (i >= original.length) return void 0;
-  let text = "";
-  let j = i;
-  while (j < original.length) {
-    const o = original[j];
-    if (o === "'" || o === '"' || o === "`") {
-      const quote = o;
-      j += 1;
-      while (j < original.length && original[j] !== quote) {
-        if (original[j] === "\\" && quote !== "'" && j + 1 < original.length) {
-          text += original[j + 1];
-          j += 2;
-          continue;
-        }
-        text += original[j];
-        j += 1;
-      }
-      j += 1;
-      continue;
-    }
-    if (/\s/.test(o) || SHELL_SPLIT_CHARS.has(o)) break;
-    text += o;
-    j += 1;
-  }
-  if (!text || text === "$") return void 0;
-  return { text, end: j };
-}
-function isIgnoredRedirectTarget(target) {
-  return target === "/dev/null";
-}
-function detectExecShellSynchronousWarnings(command, shell) {
-  const masked = maskQuotedAndEscaped(command);
-  const isPowerShell = shell?.resolvedShell === "powershell";
-  const redirectTargets = [];
-  let backgrounded = false;
-  let i = 0;
-  while (i < masked.length) {
-    const ch = masked[i];
-    if (ch === "&") {
-      const next = masked[i + 1];
-      if (next === "&") {
-        i += 2;
-        continue;
-      }
-      if (next === ">") {
-        let j = i + 2;
-        if (masked[j] === ">") j += 1;
-        const target = readRedirectTarget(command, j);
-        if (target && !isIgnoredRedirectTarget(target.text)) redirectTargets.push(target.text);
-        i = target ? target.end : j;
-        continue;
-      }
-      const prev = masked[i - 1];
-      if (prev === ">" || prev === "<") {
-        i += 1;
-        continue;
-      }
-      if (isPowerShell) {
-        i += 1;
-        continue;
-      }
-      backgrounded = true;
-      i += 1;
-      continue;
-    }
-    if (ch === ">") {
-      const prev = masked[i - 1];
-      if (prev === ">" || prev === "&" || prev === "<") {
-        i += 1;
-        continue;
-      }
-      let j = i + 1;
-      if (masked[j] === ">") j += 1;
-      if (masked[j] === "&") {
-        const ampTarget = readRedirectTarget(command, j + 1);
-        const isFdDuplication = ampTarget !== void 0 && (/^\d+$/.test(ampTarget.text) || ampTarget.text === "-");
-        if (ampTarget && !isFdDuplication && !isIgnoredRedirectTarget(ampTarget.text)) {
-          redirectTargets.push(ampTarget.text);
-        }
-        i = ampTarget ? ampTarget.end : j + 1;
-        continue;
-      }
-      const target = readRedirectTarget(command, j);
-      if (target && !isIgnoredRedirectTarget(target.text)) redirectTargets.push(target.text);
-      i = target ? target.end : j;
-      continue;
-    }
-    if (ch === "<") {
-      i += masked[i + 1] === "<" || masked[i + 1] === "&" ? 2 : 1;
-      continue;
-    }
-    i += 1;
-  }
-  const wordMatch = BG_ESCAPE_WORD_PATTERN.exec(masked);
-  if (wordMatch) backgrounded = true;
-  const warnings = [];
-  if (redirectTargets.length > 0) {
-    const target = redirectTargets[0];
-    warnings.push({
-      kind: "output-redirect",
-      redirectTarget: target,
-      message: `[wake-safety] This execShell call completed synchronously; its output was redirected to ${target}. That file is NOT delivered by any completion notification \u2014 no tracked background task was created. If you need the result, read that file in this turn.`
-    });
-  }
-  if (backgrounded) {
-    warnings.push({
-      kind: "shell-backgrounding",
-      message: `[wake-safety] Detected shell-internal backgrounding (lone \`&\`, nohup/disown/setsid/Start-Process or similar). Descendant processes are NOT tracked as platform tasks and will not produce completion notifications; text such as \`LAUNCHED\` printed by the command is plain stdout, not a platform receipt.`
+      workspaceRoot: options?.workspaceRoot
+    });
+    const omitted = result4.outcome === "ok" ? result4.events.length : 0;
+    const head3 = JSON.stringify({
+      ...result4,
+      events: [],
+      eventsOmitted: omitted,
+      logRef: spill.displayPath
     });
+    return {
+      content: `${head3}${formatToolOverflowMarker({
+        spillRef: spill.displayPath,
+        totalChars: spill.totalChars,
+        totalLines: spill.totalLines,
+        omittedChars: Math.max(0, full.length - head3.length),
+        toolName: "taskLogs"
+      })}`.trimEnd(),
+      logRef: spill.displayPath
+    };
+  } catch {
+    return { content: truncateToolOutput(full, effectiveLimit) };
   }
-  return warnings;
-}
-
-// packages/agent-runtime/capabilities/execShellCapability.ts
-function buildExecShellToolDefinition(toolName = "execShell") {
-  return {
-    type: "function",
-    function: {
-      name: toolName,
-      description: `Execute a shell command from the workspace root. Prefer one compound command (e.g. 'git status && git diff --stat') to perform complete verification in one step instead of multiple small roundtrips. Do not cd into guessed paths; commands already run from the workspace root. Commands block until exit. Long-running commands (sleep over ${IMMEDIATE_DETACH_SLEEP_THRESHOLD_SECONDS}s, dev servers, watchers) automatically detach to background returning {detached: true, pid, label}; for persistent services, prefer launchProcess. On Windows the resolved shell may be Windows PowerShell 5.1 (metadata.shellKind="powershell5"): it does not support '&&'/'||' or $PSStyle \u2014 join commands with ';' or split into multiple calls. metadata.shellKind="pwsh" means PowerShell 7+ with full syntax. Read resolvedShell/shellKind from any execShell result before writing Windows-specific syntax. LIFECYCLE CONTRACT (misreading this contract silenced a real dialog for 10 hours): (1) A normal command waits synchronously for at most 120 seconds; if it ends inside that window the call IS finished \u2014 a result containing exitCode means the command has already completed, never "still running". (2) Only a result with metadata.detached === true AND a taskId represents a tracked background task that may trigger completion wake-up (terminal completion turn carrying a bounded result capsule); that handle may be waited on with taskWait and will produce a completion notification. (3) Text the command itself prints (LAUNCHED, STARTED, BACKGROUND, ...) is plain stdout with zero lifecycle meaning \u2014 never read it as a platform receipt. (4) Shell-level backgrounding (\`&\`, nohup, disown, setsid, self-daemonizing scripts, PowerShell Start-Process) is NOT tracked: those descendants produce no completion notification, and the outer shell finishing tells you nothing about them. Use background: true to turn a finite job into a tracked background task immediately. When a synchronous result's core output was redirected to a file, read that file in the SAME turn \u2014 never end the turn promising a later automatic report without a taskId.`,
-      parameters: {
-        type: "object",
-        properties: {
-          command: {
-            type: "string",
-            description: "Shell command to run (non-empty)."
-          },
-          cmd: {
-            type: "string",
-            description: "Compatibility alias for command."
-          },
-          background: {
-            type: "boolean",
-            description: "Immediately detach this command into a tracked background task (no 120s synchronous wait): returns {detached: true, taskId}, and on completion the platform resumes this conversation with a bounded result capsule (exitCode, duration, stdout/stderr tail). Default false. Use for finite jobs (tests, builds, batch) whose result you need later; NOT for dev servers/watchers \u2014 use launchProcess for those."
-          }
-        }
-      }
-    }
-  };
 }
-function normalizeExecShellInput(input) {
-  if (input === null || input === void 0) {
-    throw new Error("execShell requires a non-empty command.");
+function isProcessGroupAlive(pgid, kill = defaultSignalSender) {
+  try {
+    kill(-pgid, 0);
+    return true;
+  } catch (error) {
+    return error.code === "EPERM";
   }
-  if (typeof input === "string") {
-    const trimmed = input.trim();
-    if (!trimmed) {
-      throw new Error("execShell requires a non-empty command.");
-    }
-    if (trimmed.startsWith("{") && trimmed.endsWith("}")) {
-      try {
-        const parsed = JSON.parse(trimmed);
-        if (parsed && typeof parsed === "object") {
-          return normalizeExecShellInput(parsed);
-        }
-      } catch {
-      }
-    }
-    return { command: trimmed };
+}
+async function runTaskStop(args2) {
+  const { registry: registry2, taskId } = args2;
+  const sleep3 = args2.sleep ?? defaultSleep;
+  const kill = args2.kill ?? defaultSignalSender;
+  const graceMs = Math.max(0, args2.graceMs ?? TASK_STOP_GRACE_MS);
+  const record2 = registry2.getByTaskId(taskId);
+  if (!record2) {
+    return {
+      outcome: "not-found",
+      taskId,
+      detail: notFoundDetail(taskId),
+      cleanup: resolveCleanupReport({ confirmedStopped: false, diagnostic: "task-not-found" })
+    };
   }
-  if (typeof input === "object") {
-    const record = input;
-    let rawCommand = resolveShellCommandArg(record);
-    if (typeof rawCommand !== "string" || !rawCommand.trim()) {
-      const fallback = record.command ?? record.cmd;
-      if (typeof fallback === "string" && fallback.trim()) {
-        rawCommand = fallback;
-      }
-    }
-    const command = typeof rawCommand === "string" ? rawCommand.trim() : "";
-    if (!command) {
-      throw new Error("execShell requires a non-empty command.");
-    }
-    const activity = extractActivity(record);
-    const background = record.background === true || typeof record.background === "string" && record.background.trim().toLowerCase() === "true";
+  const termed = registry2.kill(record2.pid, "SIGTERM");
+  if (!termed) {
+    const reason = record2.transient ? "transient-foreground" : record2.status !== "running" ? "already-terminal" : "kill-refused";
+    const detail = reason === "transient-foreground" ? `${taskId} is a foreground command still inside its grace window, not a background task; its lifecycle belongs to the running execShell call.` : reason === "already-terminal" ? `${taskId} is already ${statusOf(record2)}; nothing to stop.` : `Registry refused to stop ${taskId}.`;
     return {
-      command,
-      ...record.shell !== void 0 ? { shell: record.shell } : {},
-      ...activity ? { activity } : {},
-      ...record.input !== void 0 ? { input: record.input } : {},
-      ...background ? { background: true } : {}
+      outcome: "not-stoppable",
+      taskId,
+      pid: record2.pid,
+      status: statusOf(record2),
+      reason,
+      detail,
+      // 终态 → 幂等路径（原样返回，不覆盖、不重复发事件）；其余拒绝理由保留诊断码，
+      // 绝不把「没停成」写成「已停止」（§6.3、§11.4 条款 4）。
+      cleanup: resolveCleanupReport(
+        reason === "already-terminal" ? { confirmedStopped: false, alreadyTerminal: true } : { confirmedStopped: false, diagnostic: reason }
+      )
     };
   }
-  throw new Error("execShell requires a non-empty command.");
-}
-var execShellCapability = {
-  name: "execShell",
-  getToolDefinition(toolName = "execShell") {
-    return buildExecShellToolDefinition(toolName);
-  },
-  normalizeInput(input) {
-    return normalizeExecShellInput(input);
-  },
-  async invoke(ctx, normalized) {
-    const workspaceRoot = ctx.workspaceRoot || process.cwd();
-    const command = normalized.command;
-    if (ctx.restrictToWorkspace) {
-      const escapeToken = findWorkspaceShellEscapeToken(command);
-      if (escapeToken) {
-        return buildWorkspaceShellEscapeBlockedResult({ command, token: escapeToken });
-      }
-    }
-    const interactiveAuthCommand = extractInteractiveGhAuthCommand(command);
-    if (interactiveAuthCommand) {
-      const blocked = buildInteractiveCommandBlockedResult(interactiveAuthCommand);
-      return {
-        ...blocked,
-        metadata: {
-          ...blocked.metadata,
-          ...normalized.activity ? { activity: normalized.activity } : {}
-        }
-      };
-    }
-    const shellPlan = buildWorkspaceShellPlan({
-      toolName: "execShell",
-      command,
-      shell: normalized.shell
-    });
-    const background = normalized.background === true;
-    const result4 = await runWorkspaceCommand({
-      workspaceRoot,
-      command: shellPlan.argv,
-      timeoutMs: resolveExecShellTimeoutMs(ctx.commandTimeoutMs),
-      outputLimit: ctx.commandOutputLimit,
-      commandPrefix: ctx.commandPrefix,
-      abortSignal: ctx.abortSignal,
-      detachMs: background ? 0 : isImmediateDetachShellCommand({ command }) ? 0 : ctx.detachMs,
-      stdin: typeof normalized.input === "string" ? normalized.input : void 0,
-      // Ownership of the turn that invoked this command: an auto-detached
-      // command keeps its parent dialog so its terminal can resume that
-      // conversation (see processOwnership.ts). Absent ctx.owner = unowned.
-      owner: ctx.owner ?? null
-    });
-    const warnings = result4.detached || result4.spawnFailed ? [] : detectExecShellSynchronousWarnings(command, {
-      resolvedShell: shellPlan.resolvedShell
-    });
+  if (graceMs > 0) await sleep3(graceMs);
+  if (!isProcessGroupAlive(record2.pgid, kill)) {
     return {
-      content: warnings.length > 0 ? [result4.content, ...warnings.map((warning) => warning.message)].join("\n\n") : result4.content,
-      metadata: {
-        command,
-        exitCode: result4.exitCode,
-        timedOut: result4.timedOut,
-        resolvedShell: shellPlan.resolvedShell,
-        ...shellPlan.shellKind ? { shellKind: shellPlan.shellKind } : {},
-        ...result4.aborted ? { aborted: true } : {},
-        ...result4.detached ? {
-          detached: true,
-          pid: result4.pid,
-          label: result4.label,
-          // Phase 0: stable taskId from the pre-registered Execution
-          // Envelope (additive; existing detached fields untouched).
-          taskId: result4.taskId,
-          status: "running",
-          // P0 machine-readable execution state: an explicit positive
-          // signal instead of requiring the model to infer "not detached"
-          // from absence. Mirrors the real lifecycle contract.
-          executionState: "detached",
-          trackedBackgroundTask: true,
-          completionNotification: "terminal-resume"
-        } : {
-          // P0 machine-readable execution state: the command already
-          // finished inside the synchronous window; no background task
-          // exists, so no completion notification will ever arrive.
-          executionState: "synchronous-complete",
-          trackedBackgroundTask: false,
-          completionNotification: "none"
-        },
-        ...normalized.activity ? { activity: normalized.activity } : {}
-      }
+      outcome: "stopped",
+      taskId,
+      pid: record2.pid,
+      status: reportedTaskStatus("killed"),
+      signal: "SIGTERM",
+      escalated: false,
+      cleanup: resolveCleanupReport({ confirmedStopped: true })
     };
   }
-};
+  try {
+    kill(-record2.pgid, "SIGKILL");
+  } catch {
+  }
+  return {
+    outcome: "stopped",
+    taskId,
+    pid: record2.pid,
+    status: reportedTaskStatus("killed"),
+    signal: "SIGKILL",
+    escalated: true,
+    cleanup: resolveCleanupReport({ confirmedStopped: true })
+  };
+}
+function runTasks(args2) {
+  const tasks = args2.registry.listBackground().map((record2) => ({
+    taskId: record2.taskId,
+    pid: record2.pid,
+    label: record2.label,
+    status: statusOf(record2),
+    startedAt: record2.startedAt,
+    persist: record2.persist
+  }));
+  return { tasks, count: tasks.length };
+}
 
 // packages/agent-runtime/localWorkspaceToolDefs.ts
 var WORKSPACE_TOOL_NAMES = [
@@ -16316,23 +16386,6 @@ function filterDeclaredWorkspaceToolNames(args2) {
   );
 }
 
-// packages/agent-runtime/capabilities/capabilitySdk.ts
-var BUILTIN_CAPABILITIES = [
-  execShellCapability
-];
-async function invokeCapability(capabilityOrName, input, ctx = {}) {
-  const capability = typeof capabilityOrName === "string" ? BUILTIN_CAPABILITIES.find((c) => c.name === capabilityOrName) : capabilityOrName;
-  if (!capability) {
-    throw new Error(`Capability "${String(capabilityOrName)}" not found.`);
-  }
-  const normalizedInput = capability.normalizeInput(input);
-  await evaluateCapabilityPolicy(capability, normalizedInput, ctx);
-  if (ctx.onInvoke) {
-    await ctx.onInvoke(capability.name, normalizedInput);
-  }
-  return capability.invoke(ctx, normalizedInput);
-}
-
 // packages/agent-runtime/localWorkspaceTools.ts
 async function hasRootGitignore2(workspaceRoot) {
   return hasRootGitignore(workspaceRoot);
@@ -16518,20 +16571,20 @@ function collectIntegerArg(args2) {
 var LINES_ARG_SYNTAX = '"40-120", "120-", "-50", or "50"';
 var LINES_RANGE_FORMAT = /^(\d+)?\s*-\s*(\d+)?$/;
 function parseLinesArg(value) {
-  const text = asTrimmedString(value);
-  if (!text) {
+  const text2 = asTrimmedString(value);
+  if (!text2) {
     return {
       warning: `Ignored lines: expected ${LINES_ARG_SYNTAX}, received ${describeRejectedArgValue(value)}.`
     };
   }
   const reject = {
-    warning: `Ignored lines: expected ${LINES_ARG_SYNTAX}, received ${JSON.stringify(text)}.`
+    warning: `Ignored lines: expected ${LINES_ARG_SYNTAX}, received ${JSON.stringify(text2)}.`
   };
-  if (/^\d+$/.test(text)) {
-    const count = Number(text);
+  if (/^\d+$/.test(text2)) {
+    const count = Number(text2);
     return count > 0 ? { slice: { maxLines: Math.min(count, 2e3) } } : reject;
   }
-  const range3 = LINES_RANGE_FORMAT.exec(text);
+  const range3 = LINES_RANGE_FORMAT.exec(text2);
   if (!range3) return reject;
   const [, rawStart, rawEnd] = range3;
   if (rawStart === void 0 && rawEnd === void 0) return reject;
@@ -16545,7 +16598,7 @@ function parseLinesArg(value) {
   const endLine = Number(rawEnd);
   if (endLine < startLine) {
     return {
-      warning: `Ignored lines ${JSON.stringify(text)}: the end line must be greater than or equal to the start line.`
+      warning: `Ignored lines ${JSON.stringify(text2)}: the end line must be greater than or equal to the start line.`
     };
   }
   return { slice: { startLine, endLine } };
@@ -16628,11 +16681,11 @@ function countAndReplaceEolTolerant(args2) {
   });
   return { count, result: result4 };
 }
-function normalizeEolToLf(text) {
-  return text.replace(/\r\n/g, "\n");
+function normalizeEolToLf(text2) {
+  return text2.replace(/\r\n/g, "\n");
 }
-function convertEol(text, eol) {
-  const lf = normalizeEolToLf(text);
+function convertEol(text2, eol) {
+  const lf = normalizeEolToLf(text2);
   return eol === "\r\n" ? lf.replace(/\n/g, "\r\n") : lf;
 }
 function pluralizeReplacement(count) {
@@ -16640,8 +16693,8 @@ function pluralizeReplacement(count) {
 }
 var EDIT_SNIPPET_MAX_LINES = 24;
 var EDIT_SNIPPET_WIDTH = 160;
-function clipEditSnippet(text) {
-  const lines = text.split(/\r?\n/);
+function clipEditSnippet(text2) {
+  const lines = text2.split(/\r?\n/);
   if (lines.at(-1) === "") lines.pop();
   return lines.slice(0, EDIT_SNIPPET_MAX_LINES).map((line) => line.length > EDIT_SNIPPET_WIDTH ? `${line.slice(0, EDIT_SNIPPET_WIDTH)}\u2026` : line).join("\n");
 }
@@ -16755,8 +16808,8 @@ async function runWorkspacePackageScript(args2) {
     }
   };
 }
-function parseLastJsonObject(text) {
-  const trimmed = text.trim();
+function parseLastJsonObject(text2) {
+  const trimmed = text2.trim();
   for (let index = trimmed.lastIndexOf("{"); index >= 0; index = trimmed.lastIndexOf("{", index - 1)) {
     try {
       const parsed = JSON.parse(trimmed.slice(index));
@@ -16798,9 +16851,12 @@ function expandHomePath(requestedPath) {
   if (requestedPath.startsWith("~/")) return resolve4(homedir(), requestedPath.slice(2));
   return requestedPath;
 }
+function resolveRequestedWorkspacePath(workspaceRoot, requestedPath) {
+  return resolve4(resolve4(workspaceRoot), expandHomePath(requestedPath));
+}
 async function resolveLocalWorkspaceToolPath(args2) {
   const workspaceRoot = resolve4(args2.workspaceRoot);
-  const targetPath = resolve4(workspaceRoot, expandHomePath(args2.requestedPath));
+  const targetPath = resolveRequestedWorkspacePath(workspaceRoot, args2.requestedPath);
   const insideWorkspace = isPathInsideWorkspace({ workspaceRoot, targetPath });
   const trustedSpillPath = !insideWorkspace && args2.allowRuntimeOwnedSpill === true ? await resolveRuntimeOwnedSpillPath(targetPath) : null;
   if (!insideWorkspace && trustedSpillPath === null) {
@@ -16901,7 +16957,7 @@ async function readFileTool(args2) {
   const force = parsed.force === true;
   const ledger = args2.readLedger;
   const requestRange = { startLine: sliced.startLine, endLine: sliced.endLine };
-  const fingerprint = createHash3("sha1").update(content).digest("hex").slice(0, 20);
+  const fingerprint = createHash4("sha1").update(content).digest("hex").slice(0, 20);
   let entry = ledger?.get(relativePath);
   if (entry && entry.fingerprint !== fingerprint) {
     entry = void 0;
@@ -16976,13 +17032,13 @@ async function writeFileTool(args2) {
     }
   };
 }
-function extractSnippetWords(text) {
+function extractSnippetWords(text2) {
   const tokens = [];
-  const latinWords = text.match(/[A-Za-z0-9_]{2,}/g);
+  const latinWords = text2.match(/[A-Za-z0-9_]{2,}/g);
   if (latinWords) {
     for (const w of latinWords) tokens.push(w.toLowerCase());
   }
-  const cjkChars = text.match(new RegExp("\\p{Script=Han}", "gu"));
+  const cjkChars = text2.match(new RegExp("\\p{Script=Han}", "gu"));
   if (cjkChars) {
     for (let i = 0; i < cjkChars.length - 1; i++) {
       tokens.push(cjkChars[i] + cjkChars[i + 1]);
@@ -17886,7 +17942,7 @@ function validateToolArguments(args2) {
     return { ok: true, args: {} };
   }
   const raw = typeof rawArguments === "string" ? rawArguments.trim() : "";
-  let record = {};
+  let record2 = {};
   if (raw !== "") {
     let parsed;
     try {
@@ -17897,18 +17953,18 @@ function validateToolArguments(args2) {
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
       return { ok: true, args: {} };
     }
-    record = parsed;
+    record2 = parsed;
   }
   for (const field of requiredFields) {
-    if (record[field] !== void 0) continue;
-    if (isAliasSatisfied(record, field)) continue;
+    if (record2[field] !== void 0) continue;
+    if (isAliasSatisfied(record2, field)) continue;
     return {
       ok: false,
       message: `${toolName} \u53C2\u6570\u6821\u9A8C\u5931\u8D25\uFF1A\u7F3A\u5C11\u5FC5\u586B\u53C2\u6570 "${field}"\u3002\u8BF7\u8865\u4E0A\u540E\u91CD\u65B0\u8C03\u7528 ${toolName}\u3002`
     };
   }
   for (const [field, spec] of Object.entries(properties)) {
-    const value = record[field];
+    const value = record2[field];
     if (value === void 0 || value === null) continue;
     if (!spec || typeof spec !== "object" || Array.isArray(spec)) continue;
     const declared = spec.type;
@@ -17922,7 +17978,7 @@ function validateToolArguments(args2) {
       };
     }
   }
-  return { ok: true, args: record };
+  return { ok: true, args: record2 };
 }
 function buildToolParametersIndex(tools) {
   const index = /* @__PURE__ */ new Map();
@@ -18062,6 +18118,39 @@ function resolveLocalToolPolicy(args2) {
     reason: `${toolName} is not enabled for local runtime runs. The agent must declare the tool in its manifest; in restricted mode (NOLO_LOCAL_TOOL_MODE=restricted) non-default tools also require adding to NOLO_LOCAL_ALLOWED_TOOLS (e.g. NOLO_LOCAL_ALLOWED_TOOLS=someCustomTool) and restarting the session so the env var loads.`
   };
 }
+async function runExecShellGates(args2) {
+  const opts = {
+    ...args2.abortSignal ? { abortSignal: args2.abortSignal } : {},
+    ...args2.detachMs !== void 0 ? { detachMs: args2.detachMs } : {},
+    ...args2.confirmed !== void 0 ? { confirmed: args2.confirmed } : {},
+    ...args2.enableDestructiveShellGuard !== void 0 ? { enableDestructiveShellGuard: args2.enableDestructiveShellGuard } : {},
+    ...args2.confirmDestructiveAction ? { confirmDestructiveAction: args2.confirmDestructiveAction } : {},
+    ...args2.blockDestructiveWithoutConfirmation !== void 0 ? { blockDestructiveWithoutConfirmation: args2.blockDestructiveWithoutConfirmation } : {}
+  };
+  if (normalizeLocalToolName(args2.toolName) !== "execShell") {
+    return { kind: "pass", opts };
+  }
+  if (args2.execShellApproval) {
+    const result4 = await invokeCapability("execShell", args2.callArguments, {
+      ...opts,
+      workspaceRoot: args2.workspaceRoot,
+      commandOutputLimit: args2.commandOutputLimit,
+      execShellApproval: args2.execShellApproval
+    });
+    return { kind: "handled", result: result4 };
+  }
+  let parsedInput = args2.callArguments;
+  if (typeof parsedInput === "string") {
+    try {
+      parsedInput = JSON.parse(parsedInput);
+    } catch {
+      parsedInput = { command: parsedInput };
+    }
+  }
+  await evaluateExecShellDestructiveGuard(parsedInput, opts);
+  opts.confirmed = true;
+  return { kind: "pass", opts };
+}
 async function executeLocalToolWithPolicy(args2) {
   if (args2.runToolNames !== void 0 && !args2.runToolNames.map(normalizeLocalToolName).includes(normalizeLocalToolName(args2.call.name))) {
     throw new Error(`${args2.call.name} is outside the final run tool surface.`);
@@ -18078,39 +18167,33 @@ async function executeLocalToolWithPolicy(args2) {
   }
   const parametersSchema = args2.toolParametersIndex?.get(decision.toolName);
   if (parametersSchema !== void 0) {
-    const gate = validateToolArguments({
-      toolName: decision.toolName,
-      rawArguments: args2.call.arguments,
-      parameters: parametersSchema
-    });
-    if (!gate.ok) throw new Error(gate.message);
-  }
-  const opts = {
-    ...args2.abortSignal ? { abortSignal: args2.abortSignal } : {},
-    ...args2.detachMs !== void 0 ? { detachMs: args2.detachMs } : {},
-    ...args2.confirmed !== void 0 ? { confirmed: args2.confirmed } : {},
-    ...args2.enableDestructiveShellGuard !== void 0 ? { enableDestructiveShellGuard: args2.enableDestructiveShellGuard } : {},
-    ...args2.confirmDestructiveAction ? { confirmDestructiveAction: args2.confirmDestructiveAction } : {},
-    ...args2.blockDestructiveWithoutConfirmation !== void 0 ? { blockDestructiveWithoutConfirmation: args2.blockDestructiveWithoutConfirmation } : {}
-  };
-  if (decision.toolName === "execShell") {
-    let parsedInput = args2.call.arguments;
-    if (typeof parsedInput === "string") {
-      try {
-        parsedInput = JSON.parse(parsedInput);
-      } catch {
-        parsedInput = { command: parsedInput };
-      }
-    }
-    await evaluateExecShellDestructiveGuard(parsedInput, opts);
-    opts.confirmed = true;
+    const gate2 = validateToolArguments({
+      toolName: decision.toolName,
+      rawArguments: args2.call.arguments,
+      parameters: parametersSchema
+    });
+    if (!gate2.ok) throw new Error(gate2.message);
   }
+  const gate = await runExecShellGates({
+    toolName: decision.toolName,
+    callArguments: args2.call.arguments,
+    execShellApproval: args2.execShellApproval,
+    workspaceRoot: args2.workspaceRoot,
+    commandOutputLimit: args2.commandOutputLimit,
+    abortSignal: args2.abortSignal,
+    detachMs: args2.detachMs,
+    confirmed: args2.confirmed,
+    enableDestructiveShellGuard: args2.enableDestructiveShellGuard,
+    confirmDestructiveAction: args2.confirmDestructiveAction,
+    blockDestructiveWithoutConfirmation: args2.blockDestructiveWithoutConfirmation
+  });
+  if (gate.kind === "handled") return gate.result;
   return executor(
     {
       ...args2.call,
       name: decision.toolName
     },
-    opts
+    gate.opts
   );
 }
 
@@ -18161,16 +18244,16 @@ function shouldReturnToolExecutionErrors(adapter) {
 function emitLoopEvent(boundary, event, bridge) {
   boundary.emit(bridge ? { event, bridge } : { event });
 }
-function clip2(value, max4 = 240) {
+function clip(value, max4 = 240) {
   return clipCompactText(value, max4);
 }
 function projectSafeToolObservationMetadata(metadata) {
   if (!metadata || typeof metadata !== "object") return void 0;
   const safe = {};
   if (typeof metadata.exitCode === "number") safe.exitCode = metadata.exitCode;
-  if (typeof metadata.actionGate === "string") safe.actionGate = clip2(metadata.actionGate, 240);
-  if (typeof metadata.command === "string") safe.command = clip2(metadata.command, 240);
-  if (typeof metadata.path === "string") safe.path = clip2(metadata.path, 240);
+  if (typeof metadata.actionGate === "string") safe.actionGate = clip(metadata.actionGate, 240);
+  if (typeof metadata.command === "string") safe.command = clip(metadata.command, 240);
+  if (typeof metadata.path === "string") safe.path = clip(metadata.path, 240);
   if (typeof metadata.truncated === "boolean") safe.truncated = metadata.truncated;
   if (typeof metadata.byteCount === "number") safe.byteCount = metadata.byteCount;
   if (typeof metadata.lineCount === "number") safe.lineCount = metadata.lineCount;
@@ -18186,7 +18269,7 @@ function summarizeToolResult(content, metadata) {
       const lines = trimmed.split(/\r?\n/).length;
       parts2.push(`${lines} line${lines === 1 ? "" : "s"}`);
       parts2.push(`${trimmed.length} chars`);
-      const tail = clip2(trimmed.slice(-160), 160);
+      const tail = clip(trimmed.slice(-160), 160);
       if (tail) parts2.push(`tail="${tail}"`);
     } else {
       parts2.push("empty");
@@ -18310,7 +18393,10 @@ async function executeToolCall(args2) {
           })
         );
         throw new Error(
-          `\u6A21\u578B\u751F\u6210\u7684 tool_call arguments \u4E0D\u662F\u5408\u6CD5 JSON\uFF08\u7591\u4F3C\u4E0A\u6E38\u6D41\u5F0F\u622A\u65AD\uFF0C\u539F\u59CB\u957F\u5EA6 ${rawPoisonArguments.length}\uFF09\u3002\u8BF7\u91CD\u65B0\u5B8C\u6574\u8C03\u7528 ${toolName}\uFF0C\u786E\u4FDD arguments \u662F\u95ED\u5408\u7684 JSON \u5BF9\u8C61\uFF1B\u82E5\u56E0\u53C2\u6570\u8FC7\u957F\u88AB\u622A\u65AD\uFF0C\u5148\u7CBE\u7B80\u53C2\u6570\uFF08\u4E0D\u8981\u5185\u5D4C diff/\u65E5\u5FD7\u7B49\u5927\u6BB5\u6587\u672C\uFF0C\u6539\u4F20\u8DEF\u5F84\u8BA9\u5BF9\u65B9\u81EA\u884C\u8BFB\u53D6\uFF09\u518D\u91CD\u8BD5\u3002`
+          // 只按类别换文案（判定分支、错误类型、可重试性、落库内容、日志级别全部不变）：
+          // 两类都只描述**形状**、不判原因——分类只看得出「字符串/括号是否闭合」，
+          // 分不出「上游传输层丢字节」还是「模型自己写错了闭合符」。
+          classifyUnparsableToolArgs(rawPoisonArguments) === "truncated" ? `\u6A21\u578B\u751F\u6210\u7684 tool_call arguments \u4E0D\u662F\u5408\u6CD5 JSON\uFF08\u5F62\u72B6\uFF1A\u7591\u4F3C\u5C3E\u90E8\u4E0D\u5B8C\u6574\u2014\u2014\u5B57\u7B26\u4E32\u6216\u62EC\u53F7\u672A\u95ED\u5408\uFF0C\u7591\u4F3C\u6D41\u5F0F\u4E2D\u65AD\uFF1B\u539F\u59CB\u957F\u5EA6 ${rawPoisonArguments.length}\uFF09\u3002\u8BF7\u91CD\u65B0\u5B8C\u6574\u8C03\u7528 ${toolName}\uFF0C\u786E\u4FDD arguments \u662F\u95ED\u5408\u7684 JSON \u5BF9\u8C61\uFF1B\u82E5\u56E0\u53C2\u6570\u8FC7\u957F\u88AB\u622A\u65AD\uFF0C\u5148\u7CBE\u7B80\u53C2\u6570\uFF08\u4E0D\u8981\u5185\u5D4C diff/\u65E5\u5FD7\u7B49\u5927\u6BB5\u6587\u672C\uFF0C\u6539\u4F20\u8DEF\u5F84\u8BA9\u5BF9\u65B9\u81EA\u884C\u8BFB\u53D6\uFF09\u518D\u91CD\u8BD5\u3002` : `\u6A21\u578B\u751F\u6210\u7684 tool_call arguments \u4E0D\u662F\u5408\u6CD5 JSON\uFF08\u5F62\u72B6\uFF1A\u7ED3\u6784\u5B8C\u6574\u4F46 token \u975E\u6CD5\u2014\u2014\u975E\u95ED\u5408\u95EE\u9898\uFF1B\u539F\u59CB\u957F\u5EA6 ${rawPoisonArguments.length}\uFF09\u3002\u8BF7\u91CD\u65B0\u5B8C\u6574\u8C03\u7528 ${toolName}\uFF0C\u786E\u4FDD\u6BCF\u4E2A\u5B57\u7B26\u4E32\u503C\u90FD\u6309 JSON \u89C4\u5219\u8F6C\u4E49\uFF08\u6362\u884C\u7B49\u63A7\u5236\u5B57\u7B26\u5199\u6210 \\n \u7B49\u8F6C\u4E49\u5E8F\u5217\uFF09\uFF0C\u533A\u95F4/\u7248\u672C\u53F7\u7B49\u975E JSON \u5B57\u9762\u91CF\u5199\u6210\u5B57\u7B26\u4E32\uFF08\u5982 "lines": "300-400"\uFF09\uFF0Carguments \u662F\u95ED\u5408\u7684 JSON \u5BF9\u8C61\u3002`
         );
       }
     }
@@ -18552,7 +18638,7 @@ function createTurnUsageLedger(args2) {
   let compactionUsage;
   const providerRecords = [];
   return {
-    recordProviderCall: ({ usage, model, provider }) => {
+    recordProviderCall: ({ usage, model, provider, telemetry }) => {
       turnUsage = mergeTurnUsage(turnUsage, usage);
       lastContextUsage = usage;
       if (usage && Object.keys(usage).length > 0) {
@@ -18561,6 +18647,7 @@ function createTurnUsageLedger(args2) {
           usage,
           model: model || args2.model || "unknown",
           ...provider || args2.provider ? { provider: provider || args2.provider } : {},
+          ...telemetry && Object.keys(telemetry).length > 0 ? { telemetry } : {},
           ...args2.stablePrefixHash ? {
             stablePrefixHash: args2.stablePrefixHash,
             stablePrefixEstimatedTokens: args2.stablePrefixEstimatedTokens
@@ -18588,7 +18675,7 @@ function createTurnUsageLedger(args2) {
 }
 
 // packages/agent-runtime/leafFinalHandoff.ts
-var LEAF_FINAL_HANDOFF_INSTRUCTIONS = `Leaf subtask final: return only the result, blockers/findings, and minimal evidence the parent needs. Do not narrate your process or restate the task. Keep success minimal (a one-line result is enough); on failure include the blocker, severity when relevant, and an evidence reference (file:line, test command, commit, artifact, or run/dialog). If the task explicitly requires a long-form deliverable (document, translation, dataset, code, or other artifact), provide that deliverable in full and keep only the handoff around it concise. During execution, follow the brief as given: only when new evidence would materially change the goal, risk, irreversibility, or DoD should you surface it as a blocker/finding in the handoff \u2014 do not silently expand scope or re-litigate the settled direction.`;
+var LEAF_FINAL_HANDOFF_INSTRUCTIONS = `Leaf subtask final: return only the result, blockers/findings, and minimal evidence the parent needs. Do not narrate your process or restate the task. Keep success minimal (a one-line result is enough); on failure include the blocker, severity when relevant, and an evidence reference (file:line, test command, commit, artifact, or run/dialog). If the task explicitly requires a long-form deliverable (document, translation, dataset, code, or other artifact), provide that deliverable in full and keep only the handoff around it concise. During execution, follow the brief as given: report only results incremental to the brief, new evidence, overturned assumptions, and remaining questions; only when new evidence would materially change the goal, risk, irreversibility, or DoD should you surface it as a blocker/finding \u2014 do not silently expand scope or re-litigate the settled direction. Keep success concise, but include evidence for required DoD items.`;
 
 // packages/agent-runtime/contextBlockScope.ts
 var isContextBlockScope = (value) => {
@@ -18605,7 +18692,7 @@ var normalizeContextBlockScopes = (legacyBlocks = void 0, scopes = void 0) => {
 };
 
 // packages/agent-runtime/localAutoCompaction.ts
-import { createHash as createHash4 } from "node:crypto";
+import { createHash as createHash5, randomUUID } from "node:crypto";
 function toPlanCompressionMessages(history) {
   return history.map((message, index) => ({
     id: `local-${index}`,
@@ -18620,7 +18707,7 @@ function hashSummarySourceSlice(history, summarizedBeforeId) {
   const found = bridged.findIndex((m) => m.id === summarizedBeforeId);
   if (found === -1) return void 0;
   const slice = bridged.slice(0, found + 1);
-  return createHash4("sha256").update(JSON.stringify(slice)).digest("hex");
+  return createHash5("sha256").update(JSON.stringify(slice)).digest("hex");
 }
 function validateStoredSummary(args2) {
   const { history, stored } = args2;
@@ -18671,6 +18758,39 @@ function isColdResume(history, nowMs) {
   }
   return false;
 }
+async function runSummaryFallback(fallback, content, options) {
+  try {
+    const text2 = await fallback(content, options);
+    if (typeof text2 !== "string") return null;
+    const trimmed = text2.trim();
+    return trimmed.length > 0 ? trimmed : null;
+  } catch (error) {
+    console.warn("[localLoop] auto-compaction summary fallback failed", {
+      attemptId: options.attemptId,
+      stage: "fallback"
+    });
+    return null;
+  }
+}
+var COMPACTION_RETRY_BACKOFF_MS = 6e4;
+var COMPACTION_RETRY_BACKOFF_MAX_ENTRIES = 256;
+var compactionRetryBackoff = /* @__PURE__ */ new Map();
+function isCompactionBackedOff(dialogId, now) {
+  for (const [key, until2] of compactionRetryBackoff) {
+    if (until2 <= now) compactionRetryBackoff.delete(key);
+  }
+  const until = compactionRetryBackoff.get(dialogId);
+  return until !== void 0 && until > now;
+}
+function recordCompactionFailure(dialogId, now) {
+  compactionRetryBackoff.delete(dialogId);
+  while (compactionRetryBackoff.size >= COMPACTION_RETRY_BACKOFF_MAX_ENTRIES) {
+    const oldest = compactionRetryBackoff.keys().next().value;
+    if (oldest === void 0) break;
+    compactionRetryBackoff.delete(oldest);
+  }
+  compactionRetryBackoff.set(dialogId, now + COMPACTION_RETRY_BACKOFF_MS);
+}
 async function maybeAutoCompactLocalHistory(args2) {
   const { adapter, dialogId, history } = args2;
   const emitPhase = (phase) => {
@@ -18775,7 +18895,56 @@ async function maybeAutoCompactLocalHistory(args2) {
   if (!plan.shouldCompress) {
     return projectExisting();
   }
+  const retryNow = args2.now?.() ?? Date.now();
+  if (isCompactionBackedOff(dialogId, retryNow)) {
+    const projected = projectExisting();
+    const diag = plan.diagnostics;
+    return {
+      ...projected,
+      decision: {
+        outcome: "skipped",
+        skipReason: "retry-backoff",
+        ...diag ? {
+          estimatedTokens: diag.totalUsed,
+          historyBudget: diag.historyBudget,
+          triggerRatio: diag.triggerRatio,
+          ...diag.realUsageRatio !== void 0 ? { realUsageRatio: diag.realUsageRatio } : {}
+        } : {}
+      }
+    };
+  }
   emitPhase({ kind: "compaction-start" });
+  const compactionAttemptId = randomUUID();
+  let compactionT0 = Date.now();
+  let compactionInputTokens;
+  let compactionPrevSummaryTokens;
+  let compactionInputSource;
+  let compactionPrevSummarySource;
+  let primaryElapsedMs;
+  let fallbackElapsedMs;
+  let saveElapsedMs;
+  const logCompactionTiming = (outcome, fields) => {
+    if (compactionInputTokens === void 0 && compactionInputSource !== void 0) {
+      compactionInputTokens = estimateTokenCount(compactionInputSource);
+    }
+    if (compactionPrevSummaryTokens === void 0 && compactionPrevSummarySource !== void 0) {
+      compactionPrevSummaryTokens = estimateTokenCount(compactionPrevSummarySource);
+    }
+    console.log(
+      `[compaction-timing] ${JSON.stringify({
+        attemptId: compactionAttemptId,
+        model: fields.model ?? args2.model ?? null,
+        inputTokens: compactionInputTokens ?? null,
+        prevSummaryTokens: compactionPrevSummaryTokens ?? null,
+        outputChars: fields.outputChars ?? null,
+        elapsedMs: Date.now() - compactionT0,
+        primaryElapsedMs: primaryElapsedMs ?? null,
+        fallbackElapsedMs: fallbackElapsedMs ?? null,
+        saveElapsedMs: saveElapsedMs ?? null,
+        outcome
+      })}`
+    );
+  };
   try {
     if (args2.abortSignal?.aborted) {
       throw Object.assign(new Error("auto-compaction aborted"), { compactionReason: "aborted" });
@@ -18785,7 +18954,11 @@ async function maybeAutoCompactLocalHistory(args2) {
       throw Object.assign(new Error("auto-compaction aborted"), { compactionReason: "aborted" });
     }
     const msgsToCompress = plan.msgsToCompress;
-    const messagesText = formatMessagesForSummaryWithTruncation(msgsToCompress);
+    const messagesText = formatMessagesForSummaryWithTruncation(
+      msgsToCompress,
+      TOOL_RESULT_TRUNCATE_CHARS,
+      computeSummaryInputTokenCap(contextWindow)
+    );
     const fileOpsText = formatFileOperationsFromMessages(
       msgsToCompress,
       canonicalizeToolName
@@ -18796,58 +18969,102 @@ async function maybeAutoCompactLocalHistory(args2) {
       fileOpsText
     });
     emitPhase({ kind: "waiting-provider" });
+    compactionInputSource = messagesText;
+    compactionPrevSummarySource = existingSummary;
+    compactionT0 = Date.now();
     const timeoutMs = typeof args2.timeoutMs === "number" && Number.isFinite(args2.timeoutMs) && args2.timeoutMs > 0 ? args2.timeoutMs : void 0;
     const requestController = new AbortController();
     let timeoutHandle;
     let abortListener;
+    if (args2.abortSignal?.aborted) requestController.abort(args2.abortSignal.reason);
     const request3 = provider.complete(
       [{ role: "system", content: COMPACTION_SUMMARY_SYSTEM_PROMPT }, { role: "user", content: promptContent }],
-      { signal: requestController.signal, ...timeoutMs ? { timeoutMs } : {} }
+      {
+        signal: requestController.signal,
+        ...timeoutMs ? { timeoutMs } : {},
+        // 仅日志用的 attempt id：让 compaction 埋点与 transport 诊断日志 /
+        // 服务端 x-request-id 可对上，用于关联请求级证据。不进 prompt/摘要/持久化。
+        requestId: compactionAttemptId,
+        // Room for factual handoff, exact commands and file operations.
+        max_tokens: 8192,
+        reasoning_effort: "low"
+      }
     ).then(
       (value) => ({ kind: "done", value }),
       (error) => ({ kind: "provider-error", error })
     );
     const guards = [];
-    if (timeoutMs) guards.push(new Promise((resolve5) => {
+    if (timeoutMs) guards.push(new Promise((resolve6) => {
       timeoutHandle = setTimeout(() => {
         requestController.abort();
-        resolve5({ kind: "timeout" });
+        resolve6({ kind: "timeout" });
       }, timeoutMs);
     }));
-    if (args2.abortSignal) guards.push(new Promise((resolve5) => {
+    if (args2.abortSignal) guards.push(new Promise((resolve6) => {
       abortListener = () => {
         requestController.abort(args2.abortSignal?.reason);
-        resolve5({ kind: "aborted" });
+        resolve6({ kind: "aborted" });
       };
       args2.abortSignal?.addEventListener("abort", abortListener, { once: true });
+      if (args2.abortSignal?.aborted) abortListener();
     }));
     const outcome = guards.length ? await Promise.race([request3, ...guards]) : await request3;
+    primaryElapsedMs = Date.now() - compactionT0;
     if (timeoutHandle) clearTimeout(timeoutHandle);
     if (abortListener) args2.abortSignal?.removeEventListener("abort", abortListener);
-    if (outcome.kind !== "done") {
-      const reason = outcome.kind === "timeout" ? "timeout" : outcome.kind === "aborted" ? "aborted" : "provider-error";
-      const detail = outcome.kind === "provider-error" ? outcome.error instanceof Error ? outcome.error.message : String(outcome.error) : reason === "timeout" ? `auto-compaction timed out after ${timeoutMs}ms` : "auto-compaction aborted";
-      throw Object.assign(new Error(detail), { compactionReason: reason });
+    const result4 = outcome.kind === "done" ? outcome.value : void 0;
+    let newSummary = result4?.finish_reason !== "length" && typeof result4?.content === "string" ? result4.content.trim() : "";
+    const primaryFailure = outcome.kind === "aborted" || args2.abortSignal?.aborted ? "aborted" : newSummary ? null : outcome.kind === "done" ? "provider-error" : outcome.kind;
+    if (primaryFailure === "aborted") {
+      throw Object.assign(new Error("auto-compaction aborted"), {
+        compactionReason: "aborted"
+      });
     }
-    const result4 = outcome.value;
-    const newSummary = typeof result4.content === "string" ? result4.content.trim() : "";
-    if (!newSummary) {
-      console.warn(
-        "[localLoop] auto-compaction produced empty summary; keeping prior projection"
-      );
-      const failureReason = "provider-error";
-      emitPhase({ kind: "compaction-failed", reason: failureReason });
-      return {
-        ...projectExisting(),
-        failureMessage: "summary model returned empty content",
-        failureReason,
-        decision: {
-          outcome: "failed",
-          reason: failureReason,
-          detail: "summary model returned empty content"
+    const summaryFallback = args2.summaryFallback;
+    if (primaryFailure && summaryFallback) {
+      const fallbackT0 = Date.now();
+      const fallbackSummary = await runSummaryFallback(
+        summaryFallback,
+        promptContent,
+        {
+          signal: args2.abortSignal,
+          deadlineMs: Date.now() + 3e4,
+          attemptId: compactionAttemptId
         }
-      };
+      );
+      fallbackElapsedMs = Date.now() - fallbackT0;
+      if (args2.abortSignal?.aborted) {
+        throw Object.assign(new Error("auto-compaction aborted"), {
+          compactionReason: "aborted"
+        });
+      }
+      if (fallbackSummary) newSummary = fallbackSummary;
+    }
+    if (!newSummary) {
+      recordCompactionFailure(dialogId, retryNow);
+      if (outcome.kind === "done") {
+        console.warn(
+          "[localLoop] auto-compaction produced empty summary; keeping prior projection"
+        );
+        logCompactionTiming("empty", {});
+        const failureReason = "provider-error";
+        emitPhase({ kind: "compaction-failed", reason: failureReason });
+        return {
+          ...projectExisting(),
+          failureMessage: "summary model returned empty content",
+          failureReason,
+          decision: {
+            outcome: "failed",
+            reason: failureReason,
+            detail: "summary model returned empty content"
+          }
+        };
+      }
+      const reason = primaryFailure ?? "provider-error";
+      const detail = outcome.kind === "provider-error" ? outcome.error instanceof Error ? outcome.error.message : String(outcome.error) : `auto-compaction timed out after ${timeoutMs}ms`;
+      throw Object.assign(new Error(detail), { compactionReason: reason });
     }
+    const saveT0 = Date.now();
     await adapter.saveDialogSummary({
       dialogId,
       summary: newSummary,
@@ -18861,15 +19078,20 @@ async function maybeAutoCompactLocalHistory(args2) {
       })(),
       schemaVersion: COMPACTION_SUMMARY_SCHEMA_VERSION
     });
+    saveElapsedMs = Date.now() - saveT0;
     const metricsReason = invalidSummary ? "invalid_summary" : coldResume ? "cold_resume" : "context_budget";
     const metrics = buildCompactionMetricsFromPlan({
       reason: metricsReason,
       previousSummary: existingSummary,
       plan,
       newSummary,
-      summaryUsage: result4.usage
+      summaryUsage: result4?.usage
     });
     console.log(formatCompactionMetricsLog(metrics));
+    logCompactionTiming("success", {
+      model: result4?.model ?? args2.model ?? null,
+      outputChars: newSummary.length
+    });
     emitPhase({ kind: "compaction-end" });
     return {
       history: projectHistoryWithSummary({
@@ -18882,7 +19104,7 @@ async function maybeAutoCompactLocalHistory(args2) {
       reason: metricsReason,
       beforeTokens: metrics.previousSummaryTokens + metrics.compressedTokens,
       afterTokens: metrics.newSummaryTokens + metrics.retainedTokens,
-      ...result4.usage ? { usage: result4.usage } : {},
+      ...result4?.usage ? { usage: result4.usage } : {},
       metrics,
       decision: {
         outcome: "compressed",
@@ -18899,6 +19121,8 @@ async function maybeAutoCompactLocalHistory(args2) {
     console.warn("[localLoop] auto-compaction failed:", error);
     const failureMessage = error instanceof Error && error.message ? error.message.slice(0, 200) : String(error).slice(0, 200);
     const failureReason = error instanceof Error && "compactionReason" in error ? error.compactionReason : "provider-error";
+    logCompactionTiming(failureReason, {});
+    if (failureReason !== "aborted") recordCompactionFailure(dialogId, retryNow);
     emitPhase({ kind: "compaction-failed", reason: failureReason });
     return {
       ...projectExisting(),
@@ -18985,6 +19209,7 @@ function createTurnCompactionController(args2) {
         realContextUsagePercent,
         abortSignal: args2.abortSignal,
         timeoutMs: args2.timeoutMs,
+        summaryFallback: args2.summaryFallback,
         onPhase: (phase) => emitPhase(phase, "initial")
       });
       emitObservation(compacted);
@@ -19017,6 +19242,7 @@ function createTurnCompactionController(args2) {
         ...ratio !== void 0 ? { realContextUsagePercent: ratio } : {},
         abortSignal: args2.abortSignal,
         timeoutMs: args2.timeoutMs,
+        summaryFallback: args2.summaryFallback,
         onPhase: (phase) => emitPhase(phase, "in-loop")
       });
       if (compacted.usage) {
@@ -19029,8 +19255,9 @@ function createTurnCompactionController(args2) {
           contextReferenceResolver: args2.contextReferenceResolver
         });
         if (rebuilt.downgraded > 0) {
+          const stats = rebuilt.stats;
           console.warn(
-            `[nolo] downgraded ${rebuilt.downgraded} tool_call(s) with unparsable JSON arguments from outbound history after compaction; persisted history untouched`
+            `[nolo] rewrote ${stats.rewrittenToolCalls} tool calls in ${stats.rewrittenAssistantMessages} assistant messages and ${stats.rewrittenToolMessages} tool-result messages after compaction (bad arguments: truncated=${stats.badArguments.truncated}, malformed=${stats.badArguments.malformed}); persisted history untouched`
           );
         }
         args2.replaceWorkingView(rebuilt.messages);
@@ -19043,11 +19270,132 @@ function createTurnCompactionController(args2) {
   return { runInitial, maybeCompactInLoop };
 }
 
+// packages/agent-runtime/providerCallTelemetry.ts
+import { createHash as createHash6 } from "node:crypto";
+var shortHash = (value) => createHash6("sha1").update(value).digest("hex").slice(0, 12);
+var hashMessage = (message) => {
+  let text2;
+  try {
+    text2 = JSON.stringify(message) ?? "";
+  } catch {
+    text2 = String(message);
+  }
+  return shortHash(text2);
+};
+function computeDivergeAt(prev, cur) {
+  const n = Math.min(prev.length, cur.length);
+  for (let i = 0; i < n; i += 1) {
+    if (prev[i] !== cur[i]) return i;
+  }
+  return cur.length >= prev.length ? -1 : n;
+}
+var DIVERGE_TRACKER_MAX_DIALOGS = 50;
+function createDivergeTracker(max4 = DIVERGE_TRACKER_MAX_DIALOGS) {
+  const map8 = /* @__PURE__ */ new Map();
+  return {
+    observe(dialogKey, hashes) {
+      const prev = map8.get(dialogKey);
+      map8.delete(dialogKey);
+      map8.set(dialogKey, hashes);
+      while (map8.size > max4) {
+        const oldest = map8.keys().next().value;
+        if (oldest === void 0) break;
+        map8.delete(oldest);
+      }
+      if (!prev) return { divergeAt: null };
+      return { divergeAt: computeDivergeAt(prev, hashes), prevMsgCount: prev.length };
+    },
+    size: () => map8.size
+  };
+}
+var processDivergeTracker = createDivergeTracker();
+function buildRequestTelemetry(args2) {
+  try {
+    const hashes = args2.messages.map(hashMessage);
+    let toolResultChars = 0;
+    let toolResultCount = 0;
+    let contentChars = 0;
+    for (const m of args2.messages) {
+      const chars = contentCharCount(m.content);
+      contentChars += chars;
+      if (m.role === "tool") {
+        toolResultChars += chars;
+        toolResultCount += 1;
+      }
+    }
+    const diverge = (args2.tracker ?? processDivergeTracker).observe(args2.dialogKey, hashes);
+    return {
+      ...args2.toolsHash ? { toolsHash: args2.toolsHash } : {},
+      msgCount: args2.messages.length,
+      contentChars,
+      toolResultChars,
+      toolResultCount,
+      ...diverge
+    };
+  } catch {
+    return void 0;
+  }
+}
+function hashToolDefinitions(tools) {
+  try {
+    return shortHash(JSON.stringify(tools));
+  } catch {
+    return void 0;
+  }
+}
+
 // packages/agent-runtime/localLoop.ts
 var LOCAL_AGENT_CONFIG_MISSING_CODE = "LOCAL_AGENT_CONFIG_MISSING";
 var LLM_REQUEST_TIMEOUT = "LLM_REQUEST_TIMEOUT";
 var DEFAULT_LLM_REQUEST_TIMEOUT_MS = 10 * 60 * 1e3;
 var DEFAULT_COMPACTION_TIMEOUT_MS = 60 * 1e3;
+var DEFAULT_ROUND_BUDGET_WARNING_THRESHOLD = 25;
+function buildRoundBudgetWarningPrompt(threshold) {
+  return `[\u7CFB\u7EDF\u63D0\u793A] \u5F53\u524D\u5355\u6B21\u4EFB\u52A1\u7684\u8FDE\u7EED\u5DE5\u5177\u8C03\u7528\u5DF2\u8FBE ${threshold} \u8F6E\u3002\u4E3A\u9632\u6B62\u4E0A\u4E0B\u6587\u590D\u5408\u81A8\u80C0\u4E0E\u6210\u672C\u5931\u63A7\uFF0C\u8BF7\u5728\u672C\u8F6E\u6216\u4E0B\u4E00\u8F6E\u5185\u6536\u655B\u5F53\u524D\u6267\u884C\u7ED3\u679C\uFF0C\u8F93\u51FA\u5DF2\u9A8C\u8BC1\u4E8B\u5B9E\u3001\u9636\u6BB5\u6027\u7ED3\u8BBA\u6216\u5F53\u524D\u5361\u70B9\uFF0C\u5B8C\u6210\u9636\u6BB5\u4EA4\u63A5\u3002`;
+}
+var CONCURRENT_READONLY_TOOLS = /* @__PURE__ */ new Set([
+  "readFile",
+  "read_file",
+  "readWorkspaceFile",
+  "globFiles",
+  "readDoc",
+  "readSkillDoc",
+  "listSpaces",
+  "readSpace",
+  "listTables",
+  "queryTableRows",
+  "listDialogs",
+  "readDialog",
+  "queryDialogsBySubjectRef",
+  "listAgents",
+  "readAgent",
+  "cliWhoami",
+  "cliDoctor",
+  "listProcesses",
+  "fetchWebpage",
+  "exa_search"
+]);
+function partitionToolCallsIntoBatches(toolCalls) {
+  const batches = [];
+  let currentReadBatch = [];
+  for (let i = 0; i < toolCalls.length; i += 1) {
+    const toolCall = toolCalls[i];
+    const isReadOnly = CONCURRENT_READONLY_TOOLS.has(toolCall.function.name);
+    if (isReadOnly) {
+      currentReadBatch.push({ index: i, toolCall });
+    } else {
+      if (currentReadBatch.length > 0) {
+        batches.push({ isConcurrent: true, calls: currentReadBatch });
+        currentReadBatch = [];
+      }
+      batches.push({ isConcurrent: false, calls: [{ index: i, toolCall }] });
+    }
+  }
+  if (currentReadBatch.length > 0) {
+    batches.push({ isConcurrent: true, calls: currentReadBatch });
+  }
+  return batches;
+}
 function resolveLlmRequestTimeoutMs(input) {
   const raw = input.llmRequestTimeoutMs ?? input.timeoutMs;
   return typeof raw === "number" && Number.isFinite(raw) && raw > 0 ? raw : DEFAULT_LLM_REQUEST_TIMEOUT_MS;
@@ -19056,6 +19404,10 @@ function resolveCompactionTimeoutMs(input) {
   const raw = input.compactionTimeoutMs;
   return typeof raw === "number" && Number.isFinite(raw) && raw > 0 ? raw : DEFAULT_COMPACTION_TIMEOUT_MS;
 }
+function readHostCompactionSummaryFallback(adapter) {
+  const value = adapter.compactionSummaryFallback;
+  return typeof value === "function" ? value : void 0;
+}
 async function runCompleteWithTimeout(args2) {
   const { provider, messages, options, timeoutMs, round, input, boundary, context: context3, providerName, model } = args2;
   emitLoopEvent(boundary, {
@@ -19137,6 +19489,30 @@ function extractUserInputText(content) {
   if (!Array.isArray(content)) return "";
   return content.flatMap((part) => part?.type === "text" && part.text ? [part.text] : []).join("\n").trim();
 }
+function safeToolNamesHash(names) {
+  try {
+    return names.length ? shortHash([...names].sort().join(",")) : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function finalizeCallTelemetry(base, result4, round, startedAt) {
+  try {
+    const endTs = Date.now();
+    const toolCalls = (result4.tool_calls ?? []).map((call) => call?.function?.name ?? call?.name).filter((name) => typeof name === "string");
+    const providerToolsHash = result4.toolsHash;
+    return {
+      ...base,
+      ...typeof providerToolsHash === "string" ? { toolsHash: providerToolsHash } : {},
+      round,
+      endTs,
+      durationMs: endTs - startedAt,
+      ...toolCalls.length ? { toolCalls } : {}
+    };
+  } catch {
+    return void 0;
+  }
+}
 function attachDialogIdToError(error, dialogId) {
   if (!dialogId) return;
   if (typeof error === "object" && error !== null) {
@@ -19171,13 +19547,20 @@ async function persistFailedLocalTurn(args2) {
       ...args2.input.spaceId ? { spaceId: args2.input.spaceId } : {},
       ...args2.input.category ? { category: args2.input.category } : {},
       ...args2.input.inheritedFromDialogKey ? { inheritedFromDialogKey: args2.input.inheritedFromDialogKey } : {},
-      ...args2.input.parentDialogId ? { parentDialogId: args2.input.parentDialogId } : {}
+      ...args2.input.parentDialogId ? { parentDialogId: args2.input.parentDialogId } : {},
+      ...typeof args2.input.freshDialog === "boolean" ? { freshDialog: args2.input.freshDialog } : {}
     });
     return saved?.dialogId;
   } catch {
     return args2.input.continueDialogId;
   }
 }
+async function loadAdapterDialogHistory(adapter, dialogId, strictContinueHistory) {
+  if (adapter.loadDialogHistoryWithSource) {
+    return await adapter.loadDialogHistoryWithSource(dialogId, { strictContinueHistory });
+  }
+  return { messages: await adapter.loadDialogHistory(dialogId) };
+}
 async function runLocalAgentTurn(input) {
   const legacyCallbacks = {
     onLoopEvent: input.onLoopEvent,
@@ -19261,9 +19644,22 @@ async function runLocalAgentTurn(input) {
     let sanitizedInput = await sanitizeInbound(input.input);
     let sanitizedPersistedInput = input.persistedInput === void 0 ? void 0 : await sanitizeInbound(input.persistedInput);
     let history = [];
+    let dialogHistorySource;
     try {
-      history = input.continueDialogId ? await input.adapter.loadDialogHistory(input.continueDialogId) : [];
+      if (input.continueDialogId) {
+        const loaded = await loadAdapterDialogHistory(
+          input.adapter,
+          input.continueDialogId,
+          input.strictContinueHistory
+        );
+        if (input.strictContinueHistory && (loaded.source === "none" || loaded.source === "partial")) {
+          throw new Error(`Strict continuation history unavailable: ${loaded.source}`);
+        }
+        history = loaded.messages;
+        dialogHistorySource = loaded.source;
+      }
     } catch (error) {
+      if (input.strictContinueHistory) throw error;
       const dialogId = await persistFailedLocalTurn({
         adapter: input.adapter,
         agentKey: agentConfig.key,
@@ -19276,6 +19672,15 @@ async function runLocalAgentTurn(input) {
       throw error;
     }
     loopTiming.mark("loadDialogHistory", 0);
+    if (input.continueDialogId && history.length === 0 && dialogHistorySource === "none") {
+      console.warn(
+        `[localLoop] dialog history unavailable for ${input.continueDialogId} (source: none); continuing without prior context.`
+      );
+    } else if (input.continueDialogId && dialogHistorySource === "partial") {
+      console.warn(
+        `[localLoop] dialog history incomplete for ${input.continueDialogId} (source: partial); only ${history.length} message(s) available, earlier context may be missing.`
+      );
+    }
     const canonicalHistory = history;
     const identityBlock = buildIdentityBlock({
       agentName: agentConfig.name,
@@ -19312,6 +19717,11 @@ async function runLocalAgentTurn(input) {
       // 删除安全红线：系统层最高优先级约束，位于所有块之前（含身份信息块），
       // owner 要求常驻「根本提示词」的最顶部（2026-09-26 批量误删事故）。
       { content: DELETE_SAFETY_RED_LINE, cacheScope: "session" },
+      // 并行是默认：系统层固定块，紧随红线（localLoop 无 static 作用域，用 session 占位，
+      // 「最顶」由数组首位保证——与红线同一约定）。
+      { content: PARALLEL_DISPATCH_DEFAULT_RULE, cacheScope: "session" },
+      // 平台风控纪律：无条件系统层块，沿用 session 占位约定。
+      { content: PLATFORM_RISK_CONTROL_RULE, cacheScope: "session" },
       { content: identityBlock, cacheScope: "session" },
       ...guidanceScopes,
       ...callerScopes
@@ -19335,6 +19745,11 @@ async function runLocalAgentTurn(input) {
       compressionTriggerRatio,
       abortSignal: input.abortSignal,
       timeoutMs: resolveCompactionTimeoutMs(input),
+      // 摘要 fallback：优先显式入参；否则读 host adapter 的会话级注入（CLI 本地
+      // adapter 专有字段，见 localRuntimeAdapter.setCliAutoCompactionSummaryFallback）。
+      // desktop/其他 host 不带该字段 → undefined → 自动压缩行为与注入前完全一致，
+      // 绝不在这里新建第二条摘要通道。
+      summaryFallback: input.compactionSummaryFallback ?? readHostCompactionSummaryFallback(input.adapter),
       boundary: observationBoundary,
       getContextUsage: () => usageLedger.lastContextUsage(),
       getCanonicalCompactionHistory: () => [
@@ -19368,8 +19783,9 @@ async function runLocalAgentTurn(input) {
     let messages = builtMessages.messages;
     loopTiming.mark("buildMessages", 0);
     if (builtMessages.poisonDowngraded > 0) {
+      const stats = builtMessages.poisonStats;
       console.warn(
-        `[nolo] downgraded ${builtMessages.poisonDowngraded} tool_call(s) with unparsable JSON arguments from outbound history (suspected upstream stream truncation); persisted history untouched`
+        `[nolo] rewrote ${stats.rewrittenToolCalls} tool calls in ${stats.rewrittenAssistantMessages} assistant messages and ${stats.rewrittenToolMessages} tool-result messages (bad arguments: truncated=${stats.badArguments.truncated}, malformed=${stats.badArguments.malformed}); persisted history untouched`
       );
     }
     const supportsImages = resolveAgentImageInputSupport({
@@ -19429,19 +19845,27 @@ async function runLocalAgentTurn(input) {
           return false;
         }
         let injected = false;
-        for (const text of pending) {
-          if (typeof text !== "string" || !text.trim()) continue;
-          const safeText = scrubSecrets(text).cleaned;
+        for (const text2 of pending) {
+          if (typeof text2 !== "string" || !text2.trim()) continue;
+          const safeText = scrubSecrets(text2).cleaned;
           transcript.push({ role: "user", content: safeText });
           injected = true;
         }
         return injected;
       };
+      const newDialogTelemetryKey = `new:${crypto.randomUUID()}`;
+      let roundBudgetWarningInjected = false;
+      const roundWarningThreshold = input.roundBudgetWarningThreshold ?? DEFAULT_ROUND_BUDGET_WARNING_THRESHOLD;
       while (true) {
         partialContent = "";
         throwIfAborted(input);
         loopTiming.mark("roundStart", round);
         applyPendingInjections();
+        if (roundWarningThreshold > 0 && round >= roundWarningThreshold && !roundBudgetWarningInjected) {
+          const prompt = buildRoundBudgetWarningPrompt(roundWarningThreshold);
+          transcript.push({ role: "user", content: prompt });
+          roundBudgetWarningInjected = true;
+        }
         const preparedMessages = prepareMessagesForProviderCall(transcript.working());
         const baseRequestMessages = filterImagePartsFromMessages(
           preparedMessages.messages,
@@ -19470,6 +19894,13 @@ async function runLocalAgentTurn(input) {
           input.onToolEvent || input.onObservationEvent || input.observationBoundary
         );
         let llmStreamActivity = 0;
+        const callStartedAt = Date.now();
+        const requestTelemetry = buildRequestTelemetry({
+          // 无 dialogId 的新对话用本 turn 唯一键，避免不同新对话共用一个槽误报漂移。
+          dialogKey: input.continueDialogId || newDialogTelemetryKey,
+          messages: requestMessages,
+          toolsHash: safeToolNamesHash(agentTools)
+        });
         result4 = await runCompleteWithTimeout({
           provider,
           messages: requestMessages,
@@ -19525,7 +19956,8 @@ async function runLocalAgentTurn(input) {
         usageLedger.recordProviderCall({
           usage: result4.usage,
           model: result4.model,
-          provider: result4.provider
+          provider: result4.provider,
+          telemetry: finalizeCallTelemetry(requestTelemetry, result4, round, callStartedAt)
         });
         const assistantGuardVerdict = progressGuard.observeAssistantResponse(result4);
         if (assistantGuardVerdict.action === "stall") {
@@ -19654,8 +20086,9 @@ ${reasoningTailLog}
         });
         const executedToolResults = [];
         loopTiming.mark("toolLoopStart", round);
-        for (const toolCall of toolCalls) {
-          const toolName = toolCall.function.name;
+        const slotResults = new Array(toolCalls.length);
+        const runSingleTool = async ({ index, toolCall }) => {
+          throwIfAborted(input);
           const { toolResult, toolExecMs } = await executeToolCall({
             input,
             toolCall,
@@ -19670,6 +20103,17 @@ ${reasoningTailLog}
               ...result4.finish_reason ? { finishReason: result4.finish_reason } : {}
             }
           });
+          slotResults[index] = {
+            toolName: toolCall.function.name,
+            toolResult,
+            toolExecMs
+          };
+        };
+        const commitSlot = (i) => {
+          const toolCall = toolCalls[i];
+          const slot = slotResults[i];
+          if (!slot) return;
+          const { toolName, toolResult, toolExecMs } = slot;
           const observedMetadata = toolExecMs === void 0 ? toolResult.metadata : { ...toolResult.metadata ?? {}, [TOOL_DURATION_METADATA_KEY]: toolExecMs };
           executedToolResults.push({
             toolName,
@@ -19688,6 +20132,29 @@ ${reasoningTailLog}
             toolName,
             ...observedMetadata ? { tool_result_metadata: observedMetadata } : {}
           });
+        };
+        const batches = partitionToolCallsIntoBatches(toolCalls);
+        for (const batch of batches) {
+          throwIfAborted(input);
+          let batchError;
+          try {
+            if (batch.isConcurrent && batch.calls.length > 1) {
+              await Promise.all(batch.calls.map(runSingleTool));
+            } else {
+              for (const call of batch.calls) {
+                await runSingleTool(call);
+              }
+            }
+          } catch (error) {
+            batchError = error;
+          } finally {
+            for (const call of batch.calls) {
+              if (slotResults[call.index]) {
+                commitSlot(call.index);
+              }
+            }
+          }
+          if (batchError) throw batchError;
         }
         const toolExecutionGuardVerdict = progressGuard.observeToolExecution(
           toolCalls,
@@ -19779,7 +20246,8 @@ ${reasoningTailLog}
       ...input.spaceId ? { spaceId: input.spaceId } : {},
       ...input.category ? { category: input.category } : {},
       ...input.inheritedFromDialogKey ? { inheritedFromDialogKey: input.inheritedFromDialogKey } : {},
-      ...input.parentDialogId ? { parentDialogId: input.parentDialogId } : {}
+      ...input.parentDialogId ? { parentDialogId: input.parentDialogId } : {},
+      ...typeof input.freshDialog === "boolean" ? { freshDialog: input.freshDialog } : {}
     });
     loopTiming.mark("saveTurn", round);
     await loopTiming.flush();
@@ -19794,6 +20262,7 @@ ${reasoningTailLog}
       dialogId: saved.dialogId,
       title: saved.title,
       ...saved.titlePatchPromise ? { titlePatchPromise: saved.titlePatchPromise } : {},
+      ...dialogHistorySource ? { dialogHistorySource } : {},
       turnMessages
     };
   } finally {
@@ -19845,6 +20314,18 @@ function responsesStreamFailureStatus(failure) {
   return 502;
 }
 var codexStreamFailureStatus = responsesStreamFailureStatus;
+function extractOutputTextFromItem(item) {
+  const parts2 = item.content;
+  if (!Array.isArray(parts2)) return "";
+  return parts2.filter(
+    (part) => !!part && typeof part === "object" && part.type === "output_text" && typeof part.text === "string"
+  ).map((part) => String(part.text)).join("");
+}
+function hasNumericTokenCount(u) {
+  return ["input_tokens", "output_tokens", "prompt_tokens", "completion_tokens", "total_tokens"].some(
+    (key) => typeof u[key] === "number" && Number.isFinite(u[key])
+  );
+}
 function createResponsesStreamCollector(callbacks) {
   let content = "";
   let reasoning = "";
@@ -19852,6 +20333,11 @@ function createResponsesStreamCollector(callbacks) {
   let usage;
   let failure;
   let completedResponse;
+  const requireResponseCompleted = callbacks?.requireResponseCompleted === true;
+  const authoritativeCompletedTools = callbacks?.authoritativeCompletedTools === true;
+  const failurePrefix = callbacks?.fallbackPrefix ?? "Responses";
+  let sawTerminalSuccess = false;
+  let sawTerminalEvent = false;
   let sawMeaningfulDelta = false;
   const observeMeaningfulOnce = () => {
     if (sawMeaningfulDelta) return;
@@ -19859,18 +20345,38 @@ function createResponsesStreamCollector(callbacks) {
     callbacks?.onMeaningfulDelta?.();
   };
   const processEvent = (ev) => {
+    callbacks?.onEvent?.(ev);
     if (isMeaningfulResponsesOutput(ev)) observeMeaningfulOnce();
     const type = String(ev.type ?? "");
     if (type === "error") {
-      failure = failure ?? toResponsesStreamFailure(ev.error, callbacks?.fallbackPrefix);
+      sawTerminalEvent = true;
+      failure = failure ?? toResponsesStreamFailure(ev.error, callbacks?.fallbackPrefix) ?? {
+        code: "response_error",
+        message: `${callbacks?.fallbackPrefix ?? "Responses"} upstream emitted an error event.`
+      };
       return;
     }
     if (type === "response.failed" || type === "response.incomplete") {
+      sawTerminalEvent = true;
       const response = ev.response;
       failure = failure ?? toResponsesStreamFailure(response?.error, callbacks?.fallbackPrefix) ?? toResponsesStreamFailure(response?.incomplete_details, callbacks?.fallbackPrefix) ?? {
         code: type === "response.incomplete" ? "response_incomplete" : "response_failed",
         message: `${callbacks?.fallbackPrefix ?? "Responses"} upstream ended with ${type}.`
       };
+      {
+        const u = response?.usage;
+        if (u && hasNumericTokenCount(u)) {
+          const prompt = typeof u.input_tokens === "number" ? u.input_tokens : typeof u.prompt_tokens === "number" ? u.prompt_tokens : 0;
+          const completion = typeof u.output_tokens === "number" ? u.output_tokens : typeof u.completion_tokens === "number" ? u.completion_tokens : 0;
+          usage = {
+            prompt_tokens: prompt,
+            completion_tokens: completion,
+            total_tokens: typeof u.total_tokens === "number" ? u.total_tokens : prompt + completion,
+            ...u.input_tokens_details && typeof u.input_tokens_details === "object" ? { input_tokens_details: u.input_tokens_details } : {},
+            ...u.output_tokens_details && typeof u.output_tokens_details === "object" ? { output_tokens_details: u.output_tokens_details } : {}
+          };
+        }
+      }
       return;
     }
     if (type === "response.output_text.delta" && typeof ev.delta === "string") {
@@ -19883,16 +20389,38 @@ function createResponsesStreamCollector(callbacks) {
       callbacks?.onReasoningDelta?.(ev.delta);
       return;
     }
-    if (type === "response.output_item.added" || type === "response.output_item.done" || type === "response.function_call_arguments.delta" || type === "response.function_call_arguments.done") {
+    if (type === "response.output_item.added" || type === "response.output_item.done") {
+      const item = ev.item;
+      if (item?.type === "message" && !content) {
+        const itemText = extractOutputTextFromItem(item);
+        if (itemText) {
+          content = itemText;
+          callbacks?.onTextDelta?.(itemText);
+        }
+      }
+      applyResponsesToolEvent(toolCallsAcc, ev);
+      return;
+    }
+    if (type === "response.function_call_arguments.delta" || type === "response.function_call_arguments.done") {
       applyResponsesToolEvent(toolCallsAcc, ev);
       return;
     }
     if (type === "response.completed") {
+      sawTerminalEvent = true;
       const response = ev.response;
+      const envelopeStatus = response && typeof response.status === "string" ? response.status : void 0;
+      if (requireResponseCompleted && envelopeStatus !== void 0 && envelopeStatus !== "completed") {
+        failure = failure ?? {
+          code: "response_not_completed",
+          message: `${failurePrefix} emitted response.completed with status "${envelopeStatus}".`
+        };
+        return;
+      }
+      sawTerminalSuccess = true;
       if (response) {
         completedResponse = response;
         const u = response.usage;
-        if (u) {
+        if (u && hasNumericTokenCount(u)) {
           const prompt = typeof u.input_tokens === "number" ? u.input_tokens : typeof u.prompt_tokens === "number" ? u.prompt_tokens : 0;
           const completion = typeof u.output_tokens === "number" ? u.output_tokens : typeof u.completion_tokens === "number" ? u.completion_tokens : 0;
           const total = typeof u.total_tokens === "number" ? u.total_tokens : prompt + completion;
@@ -19913,29 +20441,58 @@ function createResponsesStreamCollector(callbacks) {
     let finalToolCalls = finalizeResponsesToolCalls(toolCallsAcc);
     if (completedResponse) {
       const completedToolCalls = extractToolCallsFromResponseOutput(completedResponse);
-      const completedById = new Map(completedToolCalls.map((call) => [call.id, call]));
-      finalToolCalls = finalToolCalls.map((call) => {
-        const completed = completedById.get(call.id);
-        if (!completed) return call;
-        let accumulatedParses = false;
-        let completedParses = false;
-        try {
-          JSON.parse(call.function.arguments);
-          accumulatedParses = true;
-        } catch {
+      if (authoritativeCompletedTools) {
+        for (const call of completedToolCalls) {
+          const name = call.function?.name;
+          if (typeof name !== "string" || !name.trim()) {
+            failure = failure ?? {
+              code: "tool_name_missing",
+              message: `${failurePrefix} response.completed contained a tool call without a name.`
+            };
+            break;
+          }
+          const args2 = call.function?.arguments;
+          if (typeof args2 === "string" && args2.trim()) {
+            try {
+              JSON.parse(args2);
+            } catch {
+              failure = failure ?? {
+                code: "tool_arguments_malformed",
+                message: `${failurePrefix} response.completed contained malformed tool arguments for "${name}".`
+              };
+              break;
+            }
+          }
         }
-        try {
-          JSON.parse(completed.function.arguments);
-          completedParses = true;
-        } catch {
+        finalToolCalls = completedToolCalls;
+      } else {
+        const completedById = new Map(completedToolCalls.map((call) => [call.id, call]));
+        finalToolCalls = finalToolCalls.map((call) => {
+          const completed = completedById.get(call.id);
+          if (!completed) return call;
+          let accumulatedParses = false;
+          let completedParses = false;
+          try {
+            JSON.parse(call.function.arguments);
+            accumulatedParses = true;
+          } catch {
+          }
+          try {
+            JSON.parse(completed.function.arguments);
+            completedParses = true;
+          } catch {
+            return call;
+          }
+          if (completedParses && (!accumulatedParses || completed.function.arguments.startsWith(call.function.arguments))) {
+            return { ...call, function: { ...call.function, arguments: completed.function.arguments } };
+          }
           return call;
-        }
-        if (completedParses && (!accumulatedParses || completed.function.arguments.startsWith(call.function.arguments))) {
-          return { ...call, function: { ...call.function, arguments: completed.function.arguments } };
-        }
-        return call;
-      });
-      if (finalToolCalls.length === 0) finalToolCalls = completedToolCalls;
+        });
+        if (finalToolCalls.length === 0) finalToolCalls = completedToolCalls;
+      }
+    }
+    if (authoritativeCompletedTools && failure) {
+      finalToolCalls = [];
     }
     if (!content && completedResponse) {
       content = extractTextFromResponseOutput(completedResponse);
@@ -19943,35 +20500,42 @@ function createResponsesStreamCollector(callbacks) {
     if (!reasoning && completedResponse) {
       reasoning = extractReasoningFromResponseOutput(completedResponse);
     }
+    const streamComplete = sawTerminalSuccess;
+    const streamTruncated = !sawTerminalEvent;
     return {
       content,
       ...reasoning ? { reasoning_content: reasoning } : {},
       ...finalToolCalls.length > 0 ? { tool_calls: finalToolCalls } : {},
       ...usage ? { usage } : {},
-      finish_reason: finalToolCalls.length > 0 ? "tool_calls" : "stop",
-      stream_complete: true,
+      ...streamComplete ? { finish_reason: finalToolCalls.length > 0 ? "tool_calls" : "stop" } : {},
+      ...streamComplete ? { stream_complete: true } : {},
+      ...streamTruncated ? { stream_truncated: true } : {},
+      ...completedResponse ? { completed_response: completedResponse } : {},
+      ...completedResponse && typeof completedResponse.id === "string" ? { response_id: completedResponse.id } : {},
       ...failure ? { failure } : {}
     };
   };
   return {
     processEvent,
-    finalize: finalize2
-  };
-}
-function aggregateResponsesStream(events, options) {
-  const collector = createResponsesStreamCollector({
-    fallbackPrefix: options?.fallbackPrefix ?? "Codex",
-    ...options?.onMeaningfulDelta ? { onMeaningfulDelta: options.onMeaningfulDelta } : {}
-  });
-  for (const ev of events) {
-    collector.processEvent(ev);
-  }
-  const finalized = collector.finalize();
-  return {
-    text: finalized.content,
-    toolCalls: finalized.tool_calls ?? [],
-    usage: finalized.usage,
-    failure: finalized.failure
+    finalize: finalize2,
+    /**
+     * legacy 非标准 provider 可能沿用 chat wire 的 `[DONE]` 收尾哨兵。
+     * 原生 Responses（含 CF）的权威终局仍是 response.completed —— 认这个哨兵
+     * 不为 CF 开豁免：CF 被截断时既没有 completed 也没有 [DONE]。
+     */
+    markLegacyDone: () => {
+      sawTerminalEvent = true;
+      if (requireResponseCompleted) {
+        if (!sawTerminalSuccess) {
+          failure = failure ?? {
+            code: "response_completed_missing",
+            message: `${failurePrefix} upstream ended with a legacy [DONE] sentinel without response.completed.`
+          };
+        }
+        return;
+      }
+      sawTerminalSuccess = true;
+    }
   };
 }
 async function readResponsesSseCompletion(args2) {
@@ -19979,10 +20543,18 @@ async function readResponsesSseCompletion(args2) {
     onTextDelta: args2.onTextDelta,
     onReasoningDelta: args2.onReasoningDelta,
     ...args2.onMeaningfulDelta ? { onMeaningfulDelta: args2.onMeaningfulDelta } : {},
-    fallbackPrefix: args2.fallbackPrefix ?? "Responses"
+    ...args2.onEvent ? { onEvent: args2.onEvent } : {},
+    fallbackPrefix: args2.fallbackPrefix ?? "Responses",
+    ...args2.requireResponseCompleted === true ? { requireResponseCompleted: true } : {},
+    ...args2.authoritativeCompletedTools === true ? { authoritativeCompletedTools: true } : {}
   });
   for await (const frame of readSseFrames(args2.response)) {
     for (const line of frame.split("\n")) {
+      const trimmedLine = line.trim();
+      if (trimmedLine === "[DONE]" || trimmedLine === "data: [DONE]") {
+        collector.markLegacyDone();
+        continue;
+      }
       const parsed = parseSseDataLineObject(line);
       if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
         collector.processEvent(parsed);
@@ -19996,6 +20568,7 @@ async function readResponsesSseCompletion(args2) {
     err.status = status;
     err.code = result4.failure.code;
     err.type = result4.failure.type;
+    if (result4.usage) err.usage = result4.usage;
     throw err;
   }
   return result4;
@@ -20009,6 +20582,25 @@ function resolveOpenAiCompatibleWire(config) {
   if (config.wire) return config.wire;
   return isOpenAiResponsesEndpoint(config.endpoint) ? "responses" : "chat.completions";
 }
+var PROMPT_CACHE_KEY_PROVIDERS = /* @__PURE__ */ new Set([
+  "opendesign",
+  "opencode",
+  "opencode-go",
+  "runinfra",
+  "deepseek",
+  "openai"
+]);
+function shouldInjectDirectPromptCacheKey(provider, endpoint) {
+  const p = (provider || "").toLowerCase().trim();
+  if (PROMPT_CACHE_KEY_PROVIDERS.has(p)) return true;
+  if (typeof endpoint === "string") {
+    const ep = endpoint.toLowerCase();
+    if (ep.includes("open-design.ai") || ep.includes("opencode.ai") || ep.includes("deepseek.com")) {
+      return true;
+    }
+  }
+  return false;
+}
 function buildOpenAiCompatibleChatCompletionRequest(args2) {
   const isResponses = resolveOpenAiCompatibleWire(args2.providerConfig) === "responses";
   const shouldStripReasoning = shouldStripReasoningContentForOutbound(
@@ -20017,7 +20609,13 @@ function buildOpenAiCompatibleChatCompletionRequest(args2) {
   );
   const sanitizedMessages = sanitizeForOutbound(args2.messages, args2.tools);
   const messages = toOpenAiCompatibleMessages(sanitizedMessages, {
-    stripReasoningContent: shouldStripReasoning
+    stripReasoningContent: shouldStripReasoning,
+    ...args2.shapingCounts ? { shapingCounts: args2.shapingCounts } : {},
+    ...resolveReasoningReplayOptions(
+      args2.providerConfig.provider,
+      args2.providerConfig.model,
+      shouldStripReasoning
+    )
   });
   const rawBody = {
     model: args2.providerConfig.model,
@@ -20032,7 +20630,20 @@ function buildOpenAiCompatibleChatCompletionRequest(args2) {
     ...!isResponses && args2.stream ? getUsageRequestOptions(args2.providerConfig.usageProvider ?? args2.providerConfig.provider, {
       api: "chat-completions",
       endpoint: args2.providerConfig.endpoint
-    }) : {}
+    }) : {},
+    ...!isResponses && !args2.providerConfig.requestOptions?.prompt_cache_key && shouldInjectDirectPromptCacheKey(args2.providerConfig.provider, args2.providerConfig.endpoint) ? {
+      // 直连通道缓存路由亲和：第三方聚合网关（OpenDesign、OpenCode、RunInfra 等）
+      // 后端是多副本集群，前缀缓存是单节点本地的。键取跨轮稳定的部分（model + system 稳定前缀 + 工具定义），
+      // 确保同任务多轮工具循环始终打到同一后端缓存节点，避免缓存漂移击穿。
+      prompt_cache_key: stablePromptCacheKey(
+        [
+          args2.providerConfig.model,
+          collectStablePromptPrefix(sanitizedMessages),
+          args2.tools ?? []
+        ],
+        "nolo-direct"
+      )
+    } : {}
   };
   const body = isResponses ? buildResponsesRequestBody(rawBody, args2.providerConfig.model) : normalizeChatCompletionsBodyForProvider({
     body: rawBody,
@@ -20040,6 +20651,10 @@ function buildOpenAiCompatibleChatCompletionRequest(args2) {
     model: args2.providerConfig.model,
     endpoint: args2.providerConfig.endpoint
   });
+  if (args2.requestFacts) {
+    applyShapingCounts(args2.requestFacts, args2.shapingCounts);
+    writeThinkingFacts(args2.requestFacts, body);
+  }
   const endpoint = args2.providerConfig.endpoint;
   const headers = {
     "Content-Type": "application/json",
@@ -20128,6 +20743,9 @@ async function readOpenAiCompatibleSseCompletion(args2) {
   };
   for await (const frame of readSseFrames(args2.response)) {
     processOpenAiCompatibleSseEvent(frame, state);
+    if (state.sawDone) {
+      break;
+    }
   }
   flushChatCompletionStream(state);
   throwIfChatCompletionStreamFailed(state);
@@ -20146,14 +20764,32 @@ async function executeOpenAiCompatibleChatCompletion(args2) {
   const isResponses = resolveOpenAiCompatibleWire(args2.providerConfig) === "responses";
   const timingTracker = createProviderCallTimingTracker();
   const observeMeaningful = () => observeMeaningfulProviderResponse(timingTracker);
+  const diagnosticSink = resolveOutboundDiagnosticSink(args2.outboundDiagnostics);
+  const diagnosticCall = diagnosticSink ? createOutboundDiagnosticCall({
+    sink: diagnosticSink,
+    seam: "local-runtime",
+    host: args2.outboundDiagnostics?.host ?? "client",
+    wire: isResponses ? "responses" : "chat.completions",
+    provider: args2.providerConfig.provider,
+    model: args2.providerConfig.model,
+    callId: args2.outboundDiagnostics?.callId
+  }) : void 0;
+  let diagnosticAttempt = 0;
+  const terminalIfEnabled = (outcome) => diagnosticCall?.terminal(diagnosticAttempt, outcome);
   const send = async (apiKey2) => {
+    diagnosticAttempt += 1;
+    const requestFacts = diagnosticCall ? createRequestFacts() : void 0;
+    if (requestFacts) attachProjectionFacts(requestFacts, args2.projectionStats);
     const request3 = buildOpenAiCompatibleChatCompletionRequest({
       providerConfig: apiKey2 === args2.providerConfig.apiKey ? args2.providerConfig : { ...args2.providerConfig, apiKey: apiKey2 },
       messages: args2.messages,
       tools: args2.tools,
       stream: args2.stream,
-      sessionId: args2.sessionId
+      sessionId: args2.sessionId,
+      ...requestFacts ? { requestFacts } : {},
+      ...requestFacts ? { shapingCounts: createRequestShapingCounts() } : {}
     });
+    if (requestFacts) diagnosticCall?.dispatch(diagnosticAttempt, requestFacts);
     return args2.fetchImpl(request3.url, {
       ...request3.init,
       ...args2.signal ? { signal: args2.signal } : {}
@@ -20163,30 +20799,57 @@ async function executeOpenAiCompatibleChatCompletion(args2) {
   if (args2.resolveApiKey) {
     apiKey = await args2.resolveApiKey({ force: false }) ?? apiKey;
   }
-  let res = await send(apiKey);
+  let res;
+  try {
+    res = await send(apiKey);
+  } catch (error) {
+    terminalIfEnabled(isAbortError(error) ? "aborted" : "network-error");
+    throw error;
+  }
   if (res.status === 401 && args2.resolveApiKey) {
     const refreshed = await args2.resolveApiKey({ force: true });
     if (refreshed && refreshed !== apiKey) {
+      diagnosticCall?.httpResult(diagnosticAttempt, {
+        status: res.status,
+        headers: res.headers,
+        errorCategory: "authentication"
+      });
+      terminalIfEnabled("http-error");
       await res.body?.cancel().catch(() => {
       });
-      res = await send(refreshed);
+      try {
+        res = await send(refreshed);
+      } catch (error) {
+        terminalIfEnabled(isAbortError(error) ? "aborted" : "network-error");
+        throw error;
+      }
     }
   }
   if (!res.ok) {
-    const raw2 = await res.text().catch(() => "");
-    let parsed = raw2;
+    const raw = await res.text().catch(() => "");
+    let parsed = raw;
     try {
-      parsed = JSON.parse(raw2);
+      parsed = JSON.parse(raw);
     } catch {
     }
+    diagnosticCall?.httpResult(diagnosticAttempt, {
+      status: res.status,
+      headers: res.headers,
+      errorCategory: classifyOutboundErrorCategory(res.status, raw)
+    });
+    terminalIfEnabled("http-error");
     await args2.onHttpResult?.({ status: res.status, body: parsed });
     throw providerHttpFailure({
       label: "local provider",
       status: res.status,
-      raw: raw2,
+      raw,
       messages: args2.messages
     });
   }
+  diagnosticCall?.httpResult(diagnosticAttempt, {
+    status: res.status,
+    headers: res.headers
+  });
   await args2.onHttpResult?.({ status: res.status });
   const contentType = res.headers.get("content-type") ?? "";
   const isEventStream = contentType.includes("text/event-stream");
@@ -20195,65 +20858,73 @@ async function executeOpenAiCompatibleChatCompletion(args2) {
       result4.usage,
       finalizeProviderCallTiming(timingTracker)
     );
+    terminalIfEnabled("completed");
     return { ...result4, ...usage ? { usage } : {} };
   };
-  if (isEventStream) {
-    if (isResponses) {
-      const streamed2 = await readResponsesSseCompletion({
+  try {
+    if (isEventStream) {
+      if (isResponses) {
+        const streamed2 = await readResponsesSseCompletion({
+          response: res,
+          ...args2.onTextDelta ? { onTextDelta: args2.onTextDelta } : {},
+          ...args2.onReasoningDelta ? { onReasoningDelta: args2.onReasoningDelta } : {},
+          onMeaningfulDelta: observeMeaningful
+        });
+        return withTiming({
+          content: streamed2.content,
+          model: args2.providerConfig.model,
+          provider: args2.providerConfig.provider,
+          ...streamed2.tool_calls ? { tool_calls: streamed2.tool_calls } : {},
+          ...streamed2.reasoning_content ? { reasoning_content: streamed2.reasoning_content } : {},
+          ...streamed2.usage ? { usage: streamed2.usage } : {},
+          ...streamed2.stream_complete ? { stream_complete: true } : {},
+          ...streamed2.finish_reason ? { finish_reason: streamed2.finish_reason } : {},
+          trace: args2.messages
+        });
+      }
+      const streamed = await readOpenAiCompatibleSseCompletion({
         response: res,
         ...args2.onTextDelta ? { onTextDelta: args2.onTextDelta } : {},
         ...args2.onReasoningDelta ? { onReasoningDelta: args2.onReasoningDelta } : {},
         onMeaningfulDelta: observeMeaningful
       });
       return withTiming({
-        content: streamed2.content,
+        content: streamed.content,
         model: args2.providerConfig.model,
         provider: args2.providerConfig.provider,
-        ...streamed2.tool_calls ? { tool_calls: streamed2.tool_calls } : {},
-        ...streamed2.reasoning_content ? { reasoning_content: streamed2.reasoning_content } : {},
-        ...streamed2.usage ? { usage: streamed2.usage } : {},
-        ...streamed2.stream_complete ? { stream_complete: true } : {},
-        ...streamed2.finish_reason ? { finish_reason: streamed2.finish_reason } : {},
+        ...streamed.tool_calls ? { tool_calls: streamed.tool_calls } : {},
+        ...streamed.reasoning_content ? { reasoning_content: streamed.reasoning_content } : {},
+        ...streamed.usage ? { usage: streamed.usage } : {},
+        ...streamed.stream_complete ? { stream_complete: true } : {},
+        ...streamed.finish_reason ? { finish_reason: streamed.finish_reason } : {},
         trace: args2.messages
       });
     }
-    const streamed = await readOpenAiCompatibleSseCompletion({
-      response: res,
-      ...args2.onTextDelta ? { onTextDelta: args2.onTextDelta } : {},
-      ...args2.onReasoningDelta ? { onReasoningDelta: args2.onReasoningDelta } : {},
-      onMeaningfulDelta: observeMeaningful
-    });
-    return withTiming({
-      content: streamed.content,
-      model: args2.providerConfig.model,
-      provider: args2.providerConfig.provider,
-      ...streamed.tool_calls ? { tool_calls: streamed.tool_calls } : {},
-      ...streamed.reasoning_content ? { reasoning_content: streamed.reasoning_content } : {},
-      ...streamed.usage ? { usage: streamed.usage } : {},
-      ...streamed.stream_complete ? { stream_complete: true } : {},
-      ...streamed.finish_reason ? { finish_reason: streamed.finish_reason } : {},
-      trace: args2.messages
-    });
-  }
-  const raw = await res.text().catch(() => "");
-  let data = {};
-  try {
-    data = raw ? JSON.parse(raw) : {};
-  } catch {
-    data = {};
-  }
-  if (isResponses) {
-    return withTiming(parseOpenAiCompatibleResponsesResponse({
+    const raw = await res.text().catch(() => "");
+    let data = {};
+    try {
+      data = raw ? JSON.parse(raw) : {};
+    } catch {
+      data = {};
+    }
+    if (isResponses) {
+      return withTiming(parseOpenAiCompatibleResponsesResponse({
+        providerConfig: args2.providerConfig,
+        data,
+        trace: args2.messages
+      }));
+    }
+    return withTiming(parseOpenAiCompatibleChatCompletionResponse({
       providerConfig: args2.providerConfig,
       data,
       trace: args2.messages
     }));
+  } catch (error) {
+    terminalIfEnabled(
+      args2.signal?.aborted || isAbortError(error) ? "aborted" : "stream-error"
+    );
+    throw error;
   }
-  return withTiming(parseOpenAiCompatibleChatCompletionResponse({
-    providerConfig: args2.providerConfig,
-    data,
-    trace: args2.messages
-  }));
 }
 
 // packages/agent-runtime/openAiCompatibleProviderConfig.ts
@@ -20405,24 +21076,24 @@ public class NoloCredNative {
 `.trim();
 
 // packages/agent-runtime/dialogMessageRecord.ts
-function dialogMessageRecordToAgentRuntimeMessage(record) {
-  if (!record || typeof record !== "object") return null;
-  if (record.role !== "user" && record.role !== "assistant" && record.role !== "tool") return null;
+function dialogMessageRecordToAgentRuntimeMessage(record2) {
+  if (!record2 || typeof record2 !== "object") return null;
+  if (record2.role !== "user" && record2.role !== "assistant" && record2.role !== "tool") return null;
   return {
-    role: record.role,
-    content: record.content ?? "",
-    ...record.contextReference !== void 0 ? { context_reference: record.contextReference } : {},
-    ...typeof record.reasoning_content === "string" ? { reasoning_content: record.reasoning_content } : {},
-    ...typeof record.toolCallId === "string" ? { tool_call_id: record.toolCallId } : {},
-    ...Array.isArray(record.tool_calls) ? { tool_calls: record.tool_calls } : {},
-    ...typeof record.toolName === "string" ? { toolName: record.toolName } : {},
+    role: record2.role,
+    content: record2.content ?? "",
+    ...record2.contextReference !== void 0 ? { context_reference: record2.contextReference } : {},
+    ...typeof record2.reasoning_content === "string" ? { reasoning_content: record2.reasoning_content } : {},
+    ...typeof record2.toolCallId === "string" ? { tool_call_id: record2.toolCallId } : {},
+    ...Array.isArray(record2.tool_calls) ? { tool_calls: record2.tool_calls } : {},
+    ...typeof record2.toolName === "string" ? { toolName: record2.toolName } : {},
     // 写侧（dialogWritePlan）把 tool_result_metadata 以 `metadata` 字段落库；
     // 回读必须还原，否则跨 turn 投影丢失 metadata 后缀，同一 tool 消息的字节
     // 在 turn 边界漂移 → provider 前缀缓存断裂（stable projection 契约，
     // 见 docs/plans/2026-09-05-tool-output-cache-stability.md）。
-    ...record.metadata && typeof record.metadata === "object" ? { tool_result_metadata: record.metadata } : {},
+    ...record2.metadata && typeof record2.metadata === "object" ? { tool_result_metadata: record2.metadata } : {},
     ...(() => {
-      const raw = record.createdAt;
+      const raw = record2.createdAt;
       const ms = typeof raw === "number" ? raw : typeof raw === "string" ? Date.parse(raw) : NaN;
       return Number.isFinite(ms) ? { createdAt: ms } : {};
     })()
@@ -20512,11 +21183,24 @@ function mergeSubjectRefs(...groups) {
 function buildRuntimeSubjectRefs(runtimeContext) {
   return mergeSubjectRefs(runtimeContext?.subjectRefs);
 }
+function withoutSelfLineage(record2, dialogId) {
+  const next = { ...record2 };
+  for (const field of ["parentDialogId", "rootDialogId"]) {
+    if (asOptionalTrimmedString(next[field]) === dialogId) delete next[field];
+  }
+  return next;
+}
 function buildDialogLineageFields(args2) {
+  const selfDialogId = asOptionalTrimmedString(args2.dialogId);
   const inheritedFromDialogKey = asOptionalTrimmedString(args2.input.inheritedFromDialogKey);
-  const parentDialogId = asOptionalTrimmedString(args2.input.parentDialogId);
+  const rawParentDialogId = asOptionalTrimmedString(args2.input.parentDialogId);
+  const parentDialogId = rawParentDialogId && rawParentDialogId !== selfDialogId ? rawParentDialogId : void 0;
   if (!inheritedFromDialogKey && !parentDialogId) return {};
-  const rootDialogId = asOptionalTrimmedString(args2.existingDialog?.rootDialogId) ?? asOptionalTrimmedString(args2.existingDialog?.parentDialogId) ?? parentDialogId;
+  const existingParentDialogId = asOptionalTrimmedString(args2.existingDialog?.parentDialogId);
+  const existingRootDialogId = asOptionalTrimmedString(args2.existingDialog?.rootDialogId);
+  const rootDialogId = [existingRootDialogId, existingParentDialogId, parentDialogId].find(
+    (id) => id && id !== selfDialogId
+  ) ?? void 0;
   return {
     ...inheritedFromDialogKey ? { inheritedFromDialogKey } : {},
     ...parentDialogId ? { parentDialogId } : {},
@@ -20616,7 +21300,7 @@ function buildAgentRuntimeDialogWritePlan(args2) {
     args2.existingDialog
   );
   const dialogRecord = {
-    ...asRecordOrEmpty(args2.existingDialog),
+    ...withoutSelfLineage(asRecordOrEmpty(args2.existingDialog), dialogId),
     id: dialogId,
     dbKey: dialogKey,
     type: "dialog",
@@ -20638,7 +21322,8 @@ function buildAgentRuntimeDialogWritePlan(args2) {
     ...subjectRefs ? { subjectRefs } : {},
     ...buildDialogLineageFields({
       input: args2.input,
-      existingDialog: args2.existingDialog
+      existingDialog: args2.existingDialog,
+      dialogId
     }),
     ...typeof args2.input.result.toolCallCount === "number" ? { toolCallCount: args2.input.result.toolCallCount } : {},
     localRuntime: {
@@ -20680,22 +21365,22 @@ function resolveHybridServers(defaultServer, preferredServerOrigin, fallbackServ
   ].filter((value) => value.trim().length > 0);
   return [...new Set(raw.map(normalizeServerOrigin))];
 }
-function normalizeHybridRecord(dbKey, record, serverOrigin) {
-  if (!record || typeof record !== "object") return null;
+function normalizeHybridRecord(dbKey, record2, serverOrigin) {
+  if (!record2 || typeof record2 !== "object") return null;
   return {
-    ...record,
-    dbKey: typeof record.dbKey === "string" && record.dbKey ? record.dbKey : dbKey,
+    ...record2,
+    dbKey: typeof record2.dbKey === "string" && record2.dbKey ? record2.dbKey : dbKey,
     ...serverOrigin ? { serverOrigin } : {}
   };
 }
-function getHybridRecordTimestamp(record) {
-  if (!record || typeof record !== "object") return 0;
+function getHybridRecordTimestamp(record2) {
+  if (!record2 || typeof record2 !== "object") return 0;
   const candidates = [
-    record.updatedAt,
-    record.updated_at,
-    record.createdAt,
-    record.created,
-    record?.meta?.createdAt
+    record2.updatedAt,
+    record2.updated_at,
+    record2.createdAt,
+    record2.created,
+    record2?.meta?.createdAt
   ];
   for (const candidate of candidates) {
     const asNumber = asOptionalPositiveFiniteNumber(candidate);
@@ -20707,10 +21392,10 @@ function getHybridRecordTimestamp(record) {
   }
   return 0;
 }
-function isHybridTombstoneRecord(record) {
-  if (!record || typeof record !== "object") return false;
-  if (typeof record.deletedAt === "string") return record.deletedAt.trim().length > 0;
-  return Boolean(record.deletedAt);
+function isHybridTombstoneRecord(record2) {
+  if (!record2 || typeof record2 !== "object") return false;
+  if (typeof record2.deletedAt === "string") return record2.deletedAt.trim().length > 0;
+  return Boolean(record2.deletedAt);
 }
 function shouldReplaceWithHybridRecord(nextRecord, currentRecord) {
   const nextTs = getHybridRecordTimestamp(nextRecord);
@@ -20794,8 +21479,8 @@ function createHybridRecordStore(deps) {
       }
       return normalizedLocalRecord ?? null;
     },
-    write: async (dbKey, record) => {
-      const nextRecord = normalizeHybridRecord(dbKey, record) ?? { dbKey };
+    write: async (dbKey, record2) => {
+      const nextRecord = normalizeHybridRecord(dbKey, record2) ?? { dbKey };
       await deps.db.put(dbKey, nextRecord);
       return nextRecord;
     },
@@ -20943,10 +21628,10 @@ function buildLoadSkillExecutor(args2) {
         metadata: { loadSkill: true, resolved: false }
       };
     }
-    const { resolveSkillByName } = await import("./skillDiscovery-ZBU76COE.js");
+    const { resolveSkillByName } = await import("./skillDiscovery-QC35EQY4.js");
     const resolved = resolveSkillByName(args2.cwd, name);
     if (!resolved) {
-      const { resolveBuiltinSkillByName } = await import("./builtinSkillRegistry-ZMF6YGNO.js");
+      const { resolveBuiltinSkillByName } = await import("./builtinSkillRegistry-TDQ6JB2E.js");
       const builtin = resolveBuiltinSkillByName(name);
       if (builtin) {
         return {
@@ -20989,7 +21674,7 @@ ${body}`,
   };
 }
 async function formatUnknownSkillMessage(cwd, requestedName) {
-  const { discoverSkills } = await import("./skillDiscovery-ZBU76COE.js");
+  const { discoverSkills } = await import("./skillDiscovery-QC35EQY4.js");
   let available = [];
   try {
     available = discoverSkills(cwd).map((s) => s.name);
@@ -21004,8 +21689,27 @@ No skills were discovered in this workspace.`;
 Available skills: ${available.join(", ")}`;
 }
 
+// packages/agent-runtime/sessionIdentity.ts
+import { createHash as createHash7 } from "node:crypto";
+var SALT = "nolo-session-identity-v1";
+function isStableSessionIdentityEnabled(env = process.env) {
+  const v = env.NOLO_STABLE_SESSION_IDENTITY?.trim().toLowerCase();
+  return !(v === "0" || v === "false" || v === "off");
+}
+function deriveStableUuid(sessionKey, purpose) {
+  const h = createHash7("sha256").update(`${SALT}\0${purpose}\0${sessionKey}`).digest();
+  h[6] = h[6] & 15 | 80;
+  h[8] = h[8] & 63 | 128;
+  const x = h.subarray(0, 16).toString("hex");
+  return `${x.slice(0, 8)}-${x.slice(8, 12)}-${x.slice(12, 16)}-${x.slice(16, 20)}-${x.slice(20, 32)}`;
+}
+function resolveSessionKey(args2) {
+  const d = args2.dialogId?.trim();
+  return d ? `dialog:${d}` : void 0;
+}
+
 // packages/agent-runtime/devin/devinProvider.ts
-import { randomBytes, randomUUID } from "node:crypto";
+import { randomBytes, randomUUID as randomUUID2 } from "node:crypto";
 var CLIENT_NAME = "chisel";
 var CLIENT_VERSION = "3000.11.3";
 function writeVarint(fieldNum, value) {
@@ -21064,10 +21768,13 @@ function encodeDevinClientMetadata(token) {
     writeStringField(31, generateFingerprint())
   ]);
 }
-function encodeDevinChatMessage(msg) {
+function devinId(id, purpose) {
+  return id?.sessionKey && isStableSessionIdentityEnabled() ? deriveStableUuid(id.sessionKey, purpose) : randomUUID2();
+}
+function encodeDevinChatMessage(msg, identity2, index = 0) {
   const source = msg.role === "assistant" ? 2 : msg.role === "tool" ? 4 : 1;
   return Buffer.concat([
-    writeStringField(1, randomUUID()),
+    writeStringField(1, devinId(identity2, `msg:${index}:${msg.role}`)),
     writeVarint(2, source),
     writeStringField(3, msg.text),
     ...(msg.toolCalls ?? []).map(
@@ -21123,19 +21830,20 @@ function buildCompletionConfig(params) {
 }
 function buildGetChatMessageRequest(params) {
   const { token, messages, model, tools = [], temperature } = params;
+  const identity2 = { sessionKey: params.sessionKey };
   const metadata = encodeDevinClientMetadata(token);
   let systemPrompt = "";
   const filteredMessages = [];
   for (const m of messages) {
-    const text = typeof m.content === "string" ? m.content : Array.isArray(m.content) ? m.content.filter((p) => p?.type === "text").map((p) => p.text).join("\n") : "";
+    const text2 = typeof m.content === "string" ? m.content : Array.isArray(m.content) ? m.content.filter((p) => p?.type === "text").map((p) => p.text).join("\n") : "";
     if (m.role === "system") {
       systemPrompt = systemPrompt ? `${systemPrompt}
 
-${text}` : text;
+${text2}` : text2;
     } else if (m.role === "user" || m.role === "assistant" || m.role === "tool") {
       filteredMessages.push({
         role: m.role,
-        text,
+        text: text2,
         ...m.tool_call_id ? { toolCallId: m.tool_call_id } : {},
         ...m.tool_calls?.length ? { toolCalls: m.tool_calls } : {}
       });
@@ -21152,10 +21860,10 @@ ${item.text}`;
       coalesced.push({ ...item });
     }
   }
-  const chatMessageBuffers = coalesced.map((m) => encodeDevinChatMessage(m));
+  const chatMessageBuffers = coalesced.map((m, i) => encodeDevinChatMessage(m, identity2, i));
   const completionConfig = buildCompletionConfig({ temperature });
   const modelConfig = Buffer.concat([
-    writeStringField(1, randomUUID()),
+    writeStringField(1, randomUUID2()),
     writeVarint(2, 1),
     writeVarint(3, 4)
   ]);
@@ -21167,7 +21875,7 @@ ${item.text}`;
     writeMessageField(8, completionConfig),
     ...tools.map((tool) => writeMessageField(10, encodeDevinToolDefinition(tool))),
     writeMessageField(15, modelConfig),
-    writeStringField(16, randomUUID()),
+    writeStringField(16, randomUUID2()),
     writeVarint(20, 1),
     writeStringField(21, model)
   ]);
@@ -21268,12 +21976,12 @@ function readDevinUpstreamFailure(error) {
   return failure;
 }
 function parseDevinConnectTrailer(payload) {
-  const text = payload.toString("utf8").trim();
-  if (!text || text === "{}") return null;
+  const text2 = payload.toString("utf8").trim();
+  if (!text2 || text2 === "{}") return null;
   try {
-    const parsed = JSON.parse(text);
+    const parsed = JSON.parse(text2);
     if (!parsed.error) {
-      return new Error(`Devin Connect invalid terminal trailer: ${text}`);
+      return new Error(`Devin Connect invalid terminal trailer: ${text2}`);
     }
     const code = typeof parsed.error.code === "string" ? parsed.error.code : "unknown";
     const message = typeof parsed.error.message === "string" ? parsed.error.message : "Unknown error";
@@ -21283,7 +21991,7 @@ function parseDevinConnectTrailer(payload) {
       code === "resource_exhausted" ? { status: 429, body: parsed.error } : void 0
     );
   } catch {
-    return new Error(`Devin Connect invalid terminal trailer: ${text}`);
+    return new Error(`Devin Connect invalid terminal trailer: ${text2}`);
   }
 }
 function decodeDevinResponsePayload(payload) {
@@ -21328,13 +22036,13 @@ function decodeDevinResponsePayload(payload) {
       const valBytes = payload.subarray(offset, offset + len);
       offset += len;
       if (fieldNum === 3) {
-        const text = valBytes.toString("utf8");
-        content += text;
-        events.push({ type: "content", text });
+        const text2 = valBytes.toString("utf8");
+        content += text2;
+        events.push({ type: "content", text: text2 });
       } else if (fieldNum === 9) {
-        const text = valBytes.toString("utf8");
-        reasoning += text;
-        events.push({ type: "reasoning", text });
+        const text2 = valBytes.toString("utf8");
+        reasoning += text2;
+        events.push({ type: "reasoning", text: text2 });
       } else if (fieldNum === 6) {
         let nestedOffset = 0;
         let id;
@@ -21362,10 +22070,10 @@ function decodeDevinResponsePayload(payload) {
           }
           const nestedValue = valBytes.subarray(nestedOffset, nestedOffset + nestedLength);
           nestedOffset += nestedLength;
-          const text = nestedValue.toString("utf8");
-          if (nestedField === 1) id = text;
-          else if (nestedField === 2) name = text;
-          else if (nestedField === 3) argsDelta = (argsDelta ?? "") + text;
+          const text2 = nestedValue.toString("utf8");
+          if (nestedField === 1) id = text2;
+          else if (nestedField === 2) name = text2;
+          else if (nestedField === 3) argsDelta = (argsDelta ?? "") + text2;
         }
         if (id !== void 0 && name !== void 0) {
           events.push({ type: "tool-call-start", id, name });
@@ -21382,6 +22090,11 @@ function decodeDevinResponsePayload(payload) {
   }
   return { content, reasoning, finishReason, events, usage };
 }
+function isMeaningfulDevinEvent(event) {
+  if (event.type === "reasoning" || event.type === "content") return event.text.length > 0;
+  if (event.type === "tool-call-start") return !!event.name;
+  return event.argsDelta.length > 0;
+}
 function createDevinProvider(options) {
   const { token, model = "swe-2-max", fetchImpl = fetch, tools = [], temperature } = options;
   return {
@@ -21393,9 +22106,11 @@ function createDevinProvider(options) {
         messages,
         model: selectedModel,
         tools,
-        temperature
+        temperature,
+        sessionKey: resolveSessionKey({ dialogId: opts?.dialogId })
       });
       const frame = buildDevinConnectFrame(requestPayload);
+      const timingTracker = createProviderCallTimingTracker();
       const response = await fetchImpl(DEVIN_CONNECT_URL, {
         method: "POST",
         headers: {
@@ -21418,7 +22133,7 @@ function createDevinProvider(options) {
       if (!response.body) {
         throw new Error("Devin Connect response body is null");
       }
-      let text = "";
+      let text2 = "";
       let reasoning = "";
       let finishReason = null;
       let frameUsage = null;
@@ -21449,10 +22164,11 @@ function createDevinProvider(options) {
             if (delta.usage?.completion !== void 0) {
               frameUsage = delta.usage;
             }
-            text += delta.content;
+            text2 += delta.content;
             reasoning += delta.reasoning;
             if (delta.finishReason) finishReason = delta.finishReason;
             for (const event of delta.events) {
+              if (isMeaningfulDevinEvent(event)) observeMeaningfulProviderResponse(timingTracker);
               if (event.type === "reasoning") {
                 opts?.onReasoningDelta?.(event.text);
               } else if (event.type === "content") {
@@ -21498,18 +22214,19 @@ function createDevinProvider(options) {
           }
         };
       });
-      if (!text && !reasoning && toolCalls.length === 0) {
+      if (!text2 && !reasoning && toolCalls.length === 0) {
         throw new Error("Devin Connect upstream completed without content or tool calls");
       }
-      const usage = frameUsage ? {
+      const timing = finalizeProviderCallTiming(timingTracker);
+      const usage = frameUsage ? withProviderCallTimingFields({
         prompt_tokens: frameUsage.prompt + frameUsage.cacheRead,
         completion_tokens: frameUsage.completion ?? 0,
         total_tokens: frameUsage.prompt + frameUsage.cacheRead + (frameUsage.completion ?? 0) + frameUsage.cacheWrite,
         ...frameUsage.cacheRead > 0 ? { prompt_tokens_details: { cached_tokens: frameUsage.cacheRead } } : {},
         ...frameUsage.cacheWrite > 0 ? { cache_creation_input_tokens: frameUsage.cacheWrite } : {}
-      } : void 0;
+      }, timing) : void 0;
       return {
-        content: text,
+        content: text2,
         model: selectedModel,
         provider: "devin",
         ...usage ? { usage } : {},
@@ -21528,6 +22245,73 @@ function createDevinProvider(options) {
   };
 }
 
+// packages/agent-runtime/executionLeaseValidation.ts
+import { isAbsolute as isAbsolute3, relative as relative4, resolve as resolve5 } from "node:path";
+function withinRoot(root, child) {
+  if (!isAbsolute3(root) || !isAbsolute3(child)) return false;
+  const canonicalRoot = resolve5(root);
+  const canonicalChild = resolve5(child);
+  const suffix = relative4(canonicalRoot, canonicalChild);
+  return suffix === "" || suffix !== ".." && !suffix.startsWith("../") && !suffix.startsWith("..\\") && !isAbsolute3(suffix);
+}
+function subsetOf(allowed, actual) {
+  return actual.every(
+    (root) => isAbsolute3(root) && allowed.some((parent) => withinRoot(parent, root))
+  );
+}
+function validateConfiguredRootExecutionLease(ticket, lease) {
+  if (lease.ticketId !== ticket.ticketId || lease.grantId !== ticket.grantId || !lease.leaseId || !lease.backendId) return false;
+  const { filesystem } = ticket;
+  if (filesystem.readScope === "runtime-workspace" || filesystem.readScope === "legacy-unscoped" || filesystem.writeScope === "runtime-workspace") return false;
+  if (filesystem.readScope === "none" && lease.readableRoots.length > 0) return false;
+  if (filesystem.writeScope === "none" && lease.writableRoots.length > 0) return false;
+  if (filesystem.readScope === "configured-roots" && !subsetOf(filesystem.readableRoots, lease.readableRoots)) return false;
+  if (filesystem.writeScope === "configured-roots" && !subsetOf(filesystem.writableRoots, lease.writableRoots)) return false;
+  return true;
+}
+
+// packages/agent-runtime/ownerOriginExecution.ts
+var OWNER_ORIGIN_EXECUTION_VERSION = 1;
+var TOOL_LOCATION_STATUSES = ["ready", "unavailable", "stopped"];
+function record(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function text(value) {
+  return typeof value === "string" && value.trim().length > 0 && value === value.trim();
+}
+function absoluteSnapshotPath(value) {
+  if (!text(value) || value.includes("\0")) return false;
+  const drive = /^[A-Za-z]:[\\/]/.test(value);
+  const unc = value.startsWith("\\\\");
+  if (!(value.startsWith("/") || drive || unc)) return false;
+  if (unc && !/^\\\\[^\\/]+[\\/][^\\/]+(?:[\\/]|$)/.test(value)) return false;
+  const segments = value.split(drive || unc ? /[\\/]/ : /\//);
+  return !segments.some((segment) => segment === "." || segment === "..");
+}
+function projectToolExecutionLocation(value) {
+  if (!record(value) || !TOOL_LOCATION_STATUSES.includes(value.status) || !EXECUTION_BACKEND_KINDS.includes(value.hostType) || !text(value.deviceId) || !text(value.deviceName) || !record(value.workspace) || !text(value.workspace.id) || !absoluteSnapshotPath(value.workspace.root) || !absoluteSnapshotPath(value.workspace.cwd)) return { status: "unknown" };
+  return {
+    status: value.status,
+    hostType: value.hostType,
+    deviceId: value.deviceId,
+    deviceName: value.deviceName,
+    workspace: { id: value.workspace.id, root: value.workspace.root, cwd: value.workspace.cwd }
+  };
+}
+var OWNER_ROUTE_VERSION_HEADER = "X-Nolo-Owner-Route-Version";
+var OWNER_ROUTE_REQUEST_ID_HEADER = "X-Nolo-Owner-Route-Request-Id";
+function verifyOwnerRouteAck(headers, expectedRequestId) {
+  const version = headers.get(OWNER_ROUTE_VERSION_HEADER);
+  const requestId = headers.get(OWNER_ROUTE_REQUEST_ID_HEADER)?.trim();
+  if (version !== String(OWNER_ORIGIN_EXECUTION_VERSION) || !requestId) {
+    return { ok: false, code: "owner_route_unsupported" };
+  }
+  if (expectedRequestId !== void 0 && requestId !== expectedRequestId) {
+    return { ok: false, code: "owner_origin_mismatch" };
+  }
+  return { ok: true, version: OWNER_ORIGIN_EXECUTION_VERSION, requestId };
+}
+
 export {
   readCommandActionGatePayload,
   readActionGate,
@@ -21536,29 +22320,36 @@ export {
   Exit_exports,
   Effect_exports,
   formatToolOverflowMarker,
-  evaluateFileWritePolicy,
-  summarizeToolArguments,
   isDestructiveShellCommand,
   evaluateShellCommandPolicy,
+  getProcessRegistry,
   filterRetainedLedgerRecords,
   isLineRangeCovered,
-  getProcessRegistry,
+  WORKSPACE_TOOL_NAMES,
   buildLocalWorkspaceToolset,
   buildLocalWorkspacePolicyToolNames,
   buildLocalWorkspaceOpenAiTools,
   PATH_FIELD_ALIASES,
+  NEW_TEXT_FIELD_ALIASES,
+  resolveRequestedWorkspacePath,
   internalSearchWorkspace,
   internalListWorkspaceEntries,
   createLocalWorkspaceToolExecutors,
   buildToolParametersIndex,
   getAgentRuntimeToolParametersIndex,
+  normalizeLocalToolName,
+  isCommandExecutingTool,
   resolveLocalToolPolicy,
+  runExecShellGates,
   executeLocalToolWithPolicy,
   LOCAL_TURN_ABORTED_CODE,
+  hashToolDefinitions,
   LOCAL_AGENT_CONFIG_MISSING_CODE,
   runLocalAgentTurn,
+  responsesStreamFailureStatus,
   codexStreamFailureStatus,
-  aggregateResponsesStream,
+  createResponsesStreamCollector,
+  readResponsesSseCompletion,
   buildOpenAiCompatibleChatCompletionRequest,
   parseOpenAiCompatibleChatCompletionResponse,
   readOpenAiCompatibleSseCompletion,
@@ -21574,6 +22365,13 @@ export {
   buildLocalDialogWritePlan,
   buildNoloWorkspaceCliToolExecutors,
   buildLoadSkillExecutor,
+  isStableSessionIdentityEnabled,
+  deriveStableUuid,
+  resolveSessionKey,
   readDevinUpstreamFailure,
-  createDevinProvider
+  createDevinProvider,
+  validateConfiguredRootExecutionLease,
+  OWNER_ORIGIN_EXECUTION_VERSION,
+  projectToolExecutionLocation,
+  verifyOwnerRouteAck
 };