nolo-cli 0.84.0-alpha.1 → 0.84.0

package/{chunk-PF6O3GR3.js → chunk-52Q2IW2X.js}

@@ -5,21 +5,25 @@ import {
   finalizeResponsesToolCalls,
   flushChatCompletionStream,
   providerHttpFailure,
-  readSseFrames,
-  streamSseDataValues,
   throwIfChatCompletionStreamFailed
-} from "./chunk-NFT2AOK5.js";
+} from "./chunk-H4AHY5BU.js";
 import {
-  DEVIN_CONNECT_URL
-} from "./chunk-FMODTASJ.js";
+  DEVIN_CONNECT_URL,
+  parseSseDataLineJson,
+  parseSseDataLineObject
+} from "./chunk-FV3JEYR3.js";
+import {
+  readSseFrames
+} from "./chunk-GMZLP5DV.js";
 import {
   clipToolText,
   hasImageInRuntimeMessages,
+  resolveAgentContextWindow,
   resolveAgentImageInputSupport,
   resolveHistoricalToolContentCap,
   resolveToolOutputProfile,
   stripImagePartsFromMessages
-} from "./chunk-AX7RMXSH.js";
+} from "./chunk-4MK3I7Y4.js";
 import {
   downgradeUnparsableToolCalls,
   hasParsableObjectArguments,
@@ -34,16 +38,19 @@ import {
   finalizeAccumulatedToolCalls
 } from "./chunk-N7J63Q6C.js";
 import {
+  DELETE_SAFETY_RED_LINE,
   TOOL_GUIDED_SECTION_ORDER,
   buildIdentityBlock,
   buildRuntimeGuidanceBlocks,
+  detectDispatchIntent,
+  detectDispatchIntentFromMessages,
   estimateContextTokens,
   hashStablePrefixContent,
   normalizeChatCompletionsBodyForProvider,
   requiresBareImageUrl,
   resolveToolGuidedSections,
   toBareImageUrlMessages
-} from "./chunk-ETLZZQJE.js";
+} from "./chunk-Z2PV6O2T.js";
 import {
   convertMessagesToResponsesInput,
   extractReasoningFromResponseOutput,
@@ -61,22 +68,18 @@ import {
   applyToolSurfaceConstraints,
   buildDialogReadEnvelope,
   buildNoloWorkspaceCommandArgs,
+  buildNoloWorkspaceOpenAiTools,
   createStreamingDialogReadProjector,
   noloPositiveIntegerString,
   noloStringArg,
   parseNoloWorkspaceToolArguments,
   readTextStreamUpToChars,
   resolveNoloDialogInput
-} from "./chunk-ZVN6I33J.js";
-import {
-  getAntigravityUserAgent,
-  readAntigravityProjectId,
-  resolveAntigravityCloudCodeBaseUrl
-} from "./chunk-LHDV2QUI.js";
+} from "./chunk-HCT7U36O.js";
 import {
   buildProviderAuthHeaders,
   buildProviderExecutionPlan
-} from "./chunk-TMPLPCVX.js";
+} from "./chunk-6OZ36FXI.js";
 import {
   buildDialogFallbackTitleFromUserInput
 } from "./chunk-2MBTWINN.js";
@@ -90,7 +93,7 @@ import {
   resolveEmptyAssistantFallbackMessage,
   resolveEmptyAssistantOutcome,
   resolveTruncatedReasoningTailLog
-} from "./chunk-7QVPPOEC.js";
+} from "./chunk-HKNXJGEC.js";
 import {
   COMPACTION_SUMMARY_SCHEMA_VERSION,
   COMPACTION_SUMMARY_SYSTEM_PROMPT,
@@ -109,7 +112,7 @@ import {
   resolveCompressionTriggerRatio,
   truncateToolOutputForContext,
   withProviderCallTimingFields
-} from "./chunk-E36HZARC.js";
+} from "./chunk-P5EVSOPA.js";
 import {
   estimateTokenCount
 } from "./chunk-PSCNXBYA.js";
@@ -133,27 +136,25 @@ import {
   asRecordOrEmpty
 } from "./chunk-KX6YBIHG.js";
 import {
+  asTrimmedNonEmptyStringArray,
   dialogMessageKey,
   dialogMessageRange
-} from "./chunk-NHRQCXIQ.js";
+} from "./chunk-VMFTFOWF.js";
 import {
   asOptionalFiniteNumber
 } from "./chunk-WWC7I6TA.js";
-import {
-  asTrimmedNonEmptyStringArray
-} from "./chunk-I42VC5KR.js";
 import {
   asTrimmedLowercaseString
 } from "./chunk-QSJ3HFEF.js";
+import {
+  isRecord
+} from "./chunk-KUG52IAP.js";
 import {
   asTrimmedString
 } from "./chunk-3EUW3WEO.js";
 import {
   asOptionalPositiveFiniteNumber
 } from "./chunk-U6VC4MU4.js";
-import {
-  isRecord
-} from "./chunk-KUG52IAP.js";
 import {
   normalizeServerOrigin
 } from "./chunk-CF7PE763.js";
@@ -11899,6 +11900,7 @@ var toQueue = /* @__PURE__ */ dual(2, (self, options) => toQueueArray(self.chann
 var runIntoQueue = /* @__PURE__ */ dual(2, (self, queue) => runIntoQueueArray(self.channel, queue));
 
 // packages/agent-runtime/abortableKernel.ts
+var IDLE_WATCHDOG_SLICES = 20;
 function runAbortableWithTimeout(args2) {
   const taskEffect = Effect_exports.callback(
     (resume) => {
@@ -11934,12 +11936,26 @@ function runAbortableWithTimeout(args2) {
     raced = Effect_exports.raceFirst(taskEffect, abortEffect);
   }
   if (typeof args2.timeoutMs === "number") {
-    const inner = raced;
+    const outer = raced;
     const timeoutMs = args2.timeoutMs;
-    raced = Effect_exports.gen(function* () {
-      const outcome = yield* Effect_exports.timeoutOption(inner, Duration_exports.millis(timeoutMs));
-      return Option_exports.isNone(outcome) ? { kind: "timeout" } : outcome.value;
+    const activityVersion = args2.activityVersion;
+    const idleWatchdog = Effect_exports.gen(function* () {
+      const sliceCount = activityVersion ? IDLE_WATCHDOG_SLICES : 1;
+      const baseSliceMs = Math.max(1, Math.floor(timeoutMs / sliceCount));
+      let idleMs = 0;
+      for (; ; ) {
+        const versionAtSliceStart = activityVersion?.();
+        const sliceMs = Math.max(1, Math.min(timeoutMs - idleMs, baseSliceMs));
+        yield* Effect_exports.sleep(Duration_exports.millis(sliceMs));
+        idleMs += sliceMs;
+        if (activityVersion && activityVersion() !== versionAtSliceStart) {
+          idleMs = 0;
+          continue;
+        }
+        if (idleMs >= timeoutMs) return { kind: "timeout" };
+      }
     });
+    raced = Effect_exports.raceFirst(outer, idleWatchdog);
   }
   return args2.runtime ? args2.runtime.runPromise(raced) : Effect_exports.runPromise(raced);
 }
@@ -12203,8 +12219,208 @@ function summarizeToolArguments(toolName, rawArgs) {
   );
 }
 
+// packages/agent-runtime/progressGuard.ts
+var DEFAULT_MAX_CONSECUTIVE_IDENTICAL_ROUNDS = 5;
+var DEFAULT_MAX_CONSECUTIVE_STAGNANT_TOOL_ROUNDS = 8;
+function sortJsonKeys(obj) {
+  if (obj === null || typeof obj !== "object") return obj;
+  if (Array.isArray(obj)) return obj.map(sortJsonKeys);
+  const sorted = {};
+  for (const key of Object.keys(obj).sort()) {
+    sorted[key] = sortJsonKeys(obj[key]);
+  }
+  return sorted;
+}
+function normalizeToolArguments(rawArgs) {
+  if (typeof rawArgs !== "string") {
+    try {
+      return JSON.stringify(sortJsonKeys(rawArgs ?? ""));
+    } catch {
+      return String(rawArgs ?? "");
+    }
+  }
+  const trimmed = rawArgs.trim();
+  if (!trimmed) return "";
+  try {
+    const parsed = JSON.parse(trimmed);
+    return JSON.stringify(sortJsonKeys(parsed));
+  } catch {
+    return trimmed;
+  }
+}
+function extractNormalizedContentText(content) {
+  if (typeof content === "string") return content.trim();
+  if (!Array.isArray(content)) return "";
+  return content.map((part) => {
+    if (part?.type === "text") return String(part.text ?? "").trim();
+    if (part?.type === "image_url") return `[img:${part.image_url?.url ?? ""}]`;
+    return "";
+  }).filter(Boolean).join("\n");
+}
+function buildToolCallsSignature(toolCalls) {
+  if (!toolCalls || toolCalls.length === 0) return "";
+  return toolCalls.map(
+    (tc) => `${tc.function?.name ?? ""}:${normalizeToolArguments(tc.function?.arguments)}`
+  ).join(";;");
+}
+function buildAssistantActionFingerprint(result4) {
+  const content = extractNormalizedContentText(result4.content);
+  const reasoning = typeof result4.reasoning_content === "string" ? result4.reasoning_content.trim() : "";
+  let toolCallsSig = buildToolCallsSignature(result4.tool_calls);
+  let hasToolCalls = Array.isArray(result4.tool_calls) && result4.tool_calls.length > 0;
+  if (!toolCallsSig && Array.isArray(result4.output) && result4.output.length > 0) {
+    const blocksToolCalls = result4.output.filter(
+      (b) => b.type === "toolCall"
+    ).map((b) => b.toolCall);
+    if (blocksToolCalls.length > 0) {
+      toolCallsSig = buildToolCallsSignature(blocksToolCalls);
+      hasToolCalls = true;
+    }
+  }
+  const hasNonEmptyText = content.length > 0 || reasoning.length > 0;
+  const fingerprint = `${content}##${reasoning}##${toolCallsSig}`;
+  return {
+    fingerprint,
+    hasNonEmptyText,
+    hasToolCalls,
+    toolCallsSignature: toolCallsSig
+  };
+}
+function buildToolResultsSignature(toolExecutions) {
+  if (toolExecutions.length === 0) return "";
+  return toolExecutions.map((exec) => {
+    const contentStr = typeof exec.content === "string" ? exec.content.trim() : "";
+    const metaStr = exec.metadata ? JSON.stringify(sortJsonKeys(exec.metadata)) : "";
+    return `${exec.toolName}:${contentStr}:${metaStr}`;
+  }).join(";;");
+}
+function resolveProgressGuardConfig(options, env = typeof process !== "undefined" ? process.env : {}) {
+  const envDisabled = env.NOLO_LOOP_PROGRESS_GUARD_DISABLED === "true" || env.NOLO_LOOP_PROGRESS_GUARD_DISABLED === "1";
+  const disabled = options?.disabled ?? envDisabled ?? false;
+  const parsePositiveInt = (val, fallback) => {
+    if (typeof val === "number" && Number.isFinite(val) && val >= 1) {
+      return Math.floor(val);
+    }
+    if (typeof val === "string") {
+      const parsed = parseInt(val, 10);
+      if (Number.isFinite(parsed) && parsed >= 1) {
+        return parsed;
+      }
+    }
+    return fallback;
+  };
+  const maxConsecutiveIdenticalRounds = parsePositiveInt(
+    options?.maxConsecutiveIdenticalRounds ?? env.NOLO_LOOP_MAX_IDENTICAL_ROUNDS,
+    DEFAULT_MAX_CONSECUTIVE_IDENTICAL_ROUNDS
+  );
+  const maxConsecutiveStagnantToolRounds = parsePositiveInt(
+    options?.maxConsecutiveStagnantToolRounds ?? env.NOLO_LOOP_MAX_STAGNANT_TOOL_ROUNDS,
+    DEFAULT_MAX_CONSECUTIVE_STAGNANT_TOOL_ROUNDS
+  );
+  return {
+    disabled,
+    maxConsecutiveIdenticalRounds,
+    maxConsecutiveStagnantToolRounds
+  };
+}
+var LocalLoopProgressGuard = class {
+  config;
+  lastAssistantFingerprint = null;
+  lastAssistantHasNonEmptyText = false;
+  consecutiveIdenticalCount = 0;
+  lastToolCallsSignature = null;
+  lastToolResultsSignature = null;
+  consecutiveStagnantToolCount = 0;
+  constructor(config, env) {
+    this.config = resolveProgressGuardConfig(config, env);
+  }
+  /**
+   * 在 LLM 返回 assistant 响应后调用。
+   * 仅在纯文本/无工具调用且实质文本相同达到阈值时直接熔断；
+   * 若存在工具调用，则不在此处熔断，留待工具执行后结合工具结果综合判定。
+   */
+  observeAssistantResponse(result4) {
+    if (this.config.disabled) return { action: "continue" };
+    const { fingerprint, hasNonEmptyText, hasToolCalls } = buildAssistantActionFingerprint(result4);
+    if (this.lastAssistantFingerprint !== null && this.lastAssistantFingerprint === fingerprint) {
+      this.consecutiveIdenticalCount += 1;
+      if (!hasToolCalls && hasNonEmptyText && this.consecutiveIdenticalCount >= this.config.maxConsecutiveIdenticalRounds) {
+        return {
+          action: "stall",
+          reason: "repetition_loop",
+          detail: `Consecutive identical text-only assistant response for ${this.consecutiveIdenticalCount} rounds.`,
+          consecutiveRounds: this.consecutiveIdenticalCount
+        };
+      }
+    } else {
+      this.lastAssistantFingerprint = fingerprint;
+      this.lastAssistantHasNonEmptyText = hasNonEmptyText;
+      this.consecutiveIdenticalCount = 1;
+    }
+    return { action: "continue" };
+  }
+  /**
+   * 在本轮所有工具执行完毕后调用，检查是否陷入停滞死循环。
+   * 只有当工具返回内容与元数据完全无变化时才计入无进展 streak；
+   * 一旦工具结果发生变化（如合法轮询状态推进），立即重置 identical streak，确保绝不误杀正常长任务。
+   */
+  observeToolExecution(toolCalls, toolResults) {
+    if (this.config.disabled) return { action: "continue" };
+    if (!toolCalls || toolCalls.length === 0) return { action: "continue" };
+    const toolCallsSig = buildToolCallsSignature(toolCalls);
+    const toolResultsSig = buildToolResultsSignature(toolResults);
+    const toolCallsUnchanged = this.lastToolCallsSignature !== null && this.lastToolCallsSignature === toolCallsSig;
+    const toolResultsUnchanged = this.lastToolResultsSignature !== null && this.lastToolResultsSignature === toolResultsSig;
+    if (toolCallsUnchanged && toolResultsUnchanged) {
+      this.consecutiveStagnantToolCount += 1;
+      if (this.consecutiveIdenticalCount >= this.config.maxConsecutiveIdenticalRounds) {
+        return {
+          action: "stall",
+          reason: "repetition_loop",
+          detail: `Consecutive identical assistant response with unchanged tool results for ${this.consecutiveIdenticalCount} rounds.`,
+          consecutiveRounds: this.consecutiveIdenticalCount
+        };
+      }
+      if (this.consecutiveStagnantToolCount >= this.config.maxConsecutiveStagnantToolRounds) {
+        return {
+          action: "stall",
+          reason: "stagnant_tool_calls",
+          detail: `Consecutive stagnant tool calls with unchanged results for ${this.consecutiveStagnantToolCount} rounds.`,
+          consecutiveRounds: this.consecutiveStagnantToolCount
+        };
+      }
+    } else {
+      this.lastToolCallsSignature = toolCallsSig;
+      this.lastToolResultsSignature = toolResultsSig;
+      this.consecutiveStagnantToolCount = 1;
+      if (!toolResultsUnchanged) {
+        this.consecutiveIdenticalCount = 1;
+      }
+    }
+    return { action: "continue" };
+  }
+};
+function createLocalLoopProgressGuard(config, env) {
+  return new LocalLoopProgressGuard(config, env);
+}
+
+// packages/agent-runtime/toolArgumentsFingerprint.ts
+var hashFingerprintInput = (value) => {
+  let hash2 = 2166136261;
+  for (let index = 0; index < value.length; index += 1) {
+    hash2 ^= value.charCodeAt(index);
+    hash2 = Math.imul(hash2, 16777619);
+  }
+  return (hash2 >>> 0).toString(16).padStart(8, "0");
+};
+function buildToolArgumentsFingerprint(rawArguments) {
+  if (rawArguments === void 0 || rawArguments === null) return void 0;
+  const normalized = normalizeToolArguments(rawArguments);
+  return hashFingerprintInput(normalized);
+}
+
 // packages/agent-runtime/leafFinalHandoff.ts
-var LEAF_FINAL_HANDOFF_INSTRUCTIONS = `Leaf subtask final: return only the result, blockers/findings, and minimal evidence the parent needs. Do not narrate your process or restate the task. Keep success minimal (a one-line result is enough); on failure include the blocker, severity when relevant, and an evidence reference (file:line, test command, commit, artifact, or run/dialog). If the task explicitly requires a long-form deliverable (document, translation, dataset, code, or other artifact), provide that deliverable in full and keep only the handoff around it concise.`;
+var LEAF_FINAL_HANDOFF_INSTRUCTIONS = `Leaf subtask final: return only the result, blockers/findings, and minimal evidence the parent needs. Do not narrate your process or restate the task. Keep success minimal (a one-line result is enough); on failure include the blocker, severity when relevant, and an evidence reference (file:line, test command, commit, artifact, or run/dialog). If the task explicitly requires a long-form deliverable (document, translation, dataset, code, or other artifact), provide that deliverable in full and keep only the handoff around it concise. During execution, follow the brief as given: only when new evidence would materially change the goal, risk, irreversibility, or DoD should you surface it as a blocker/finding in the handoff \u2014 do not silently expand scope or re-litigate the settled direction.`;
 
 // packages/agent-runtime/contextBlockScope.ts
 var isContextBlockScope = (value) => {
@@ -12426,20 +12642,40 @@ function isColdResume(history, nowMs) {
 }
 async function maybeAutoCompactLocalHistory(args2) {
   const { adapter, dialogId, history } = args2;
-  const unchanged = () => ({
+  const emitPhase = (phase) => {
+    try {
+      args2.onPhase?.(phase);
+    } catch {
+    }
+  };
+  emitPhase({ kind: "validating-context" });
+  const unchanged = (decision) => ({
     history,
     compressed: false,
-    summaryGenerated: false
+    summaryGenerated: false,
+    decision
   });
-  if (!dialogId || history.length === 0 || typeof adapter.loadDialogSummary !== "function" || typeof adapter.saveDialogSummary !== "function") {
-    return unchanged();
+  if (!dialogId) {
+    return unchanged({ outcome: "skipped", skipReason: "no-dialog-id" });
+  }
+  if (history.length === 0) {
+    return unchanged({ outcome: "skipped", skipReason: "empty-history" });
+  }
+  if (typeof adapter.loadDialogSummary !== "function" || typeof adapter.saveDialogSummary !== "function") {
+    return unchanged({
+      outcome: "skipped",
+      skipReason: "adapter-missing-summary-methods"
+    });
   }
   let stored = null;
   try {
     stored = await adapter.loadDialogSummary(dialogId);
   } catch (error) {
     console.warn("[localLoop] loadDialogSummary failed:", error);
-    return unchanged();
+    return unchanged({
+      outcome: "skipped",
+      skipReason: "load-summary-failed"
+    });
   }
   const bridged = toPlanCompressionMessages(history);
   const validation = validateStoredSummary({ history, stored: stored ?? {} });
@@ -12475,7 +12711,21 @@ async function maybeAutoCompactLocalHistory(args2) {
     ...args2.realContextUsagePercent !== void 0 ? { realContextUsagePercent: args2.realContextUsagePercent } : {}
   });
   const projectExisting = () => {
-    if (!existingSummary.trim()) return unchanged();
+    const diag = plan.diagnostics;
+    const diagSnapshot = diag ? {
+      estimatedTokens: diag.totalUsed,
+      historyBudget: diag.historyBudget,
+      triggerRatio: diag.triggerRatio,
+      ...diag.realUsageRatio !== void 0 ? { realUsageRatio: diag.realUsageRatio } : {}
+    } : {};
+    const skippedDecision = {
+      outcome: "skipped",
+      skipReason: diag?.emptyReason === "no-pending" ? "no-pending" : diag?.emptyReason === "below-min-compress-count" ? "below-min-compress-count" : "below-trigger",
+      ...diagSnapshot,
+      ...diag ? { pendingMsgCount: diag.pendingMsgCount } : {},
+      ...diag?.compressCount !== void 0 ? { compressCount: diag.compressCount } : {}
+    };
+    if (!existingSummary.trim()) return unchanged(skippedDecision);
     return {
       history: projectHistoryWithSummary({
         history,
@@ -12483,14 +12733,26 @@ async function maybeAutoCompactLocalHistory(args2) {
         summarizedBeforeId
       }),
       compressed: true,
-      summaryGenerated: false
+      summaryGenerated: false,
+      decision: {
+        outcome: "compressed",
+        trigger: "existing-summary",
+        ...diagSnapshot
+      }
     };
   };
   if (!plan.shouldCompress) {
     return projectExisting();
   }
+  emitPhase({ kind: "compaction-start" });
   try {
+    if (args2.abortSignal?.aborted) {
+      throw Object.assign(new Error("auto-compaction aborted"), { compactionReason: "aborted" });
+    }
     const provider = await args2.resolveProvider();
+    if (args2.abortSignal?.aborted) {
+      throw Object.assign(new Error("auto-compaction aborted"), { compactionReason: "aborted" });
+    }
     const msgsToCompress = plan.msgsToCompress;
     const messagesText = formatMessagesForSummaryWithTruncation(msgsToCompress);
     const fileOpsText = formatFileOperationsFromMessages(
@@ -12502,18 +12764,57 @@ async function maybeAutoCompactLocalHistory(args2) {
       messagesText,
       fileOpsText
     });
-    const result4 = await provider.complete([
-      { role: "system", content: COMPACTION_SUMMARY_SYSTEM_PROMPT },
-      { role: "user", content: promptContent }
-    ]);
+    emitPhase({ kind: "waiting-provider" });
+    const timeoutMs = typeof args2.timeoutMs === "number" && Number.isFinite(args2.timeoutMs) && args2.timeoutMs > 0 ? args2.timeoutMs : void 0;
+    const requestController = new AbortController();
+    let timeoutHandle;
+    let abortListener;
+    const request3 = provider.complete(
+      [{ role: "system", content: COMPACTION_SUMMARY_SYSTEM_PROMPT }, { role: "user", content: promptContent }],
+      { signal: requestController.signal, ...timeoutMs ? { timeoutMs } : {} }
+    ).then(
+      (value) => ({ kind: "done", value }),
+      (error) => ({ kind: "provider-error", error })
+    );
+    const guards = [];
+    if (timeoutMs) guards.push(new Promise((resolve5) => {
+      timeoutHandle = setTimeout(() => {
+        requestController.abort();
+        resolve5({ kind: "timeout" });
+      }, timeoutMs);
+    }));
+    if (args2.abortSignal) guards.push(new Promise((resolve5) => {
+      abortListener = () => {
+        requestController.abort(args2.abortSignal?.reason);
+        resolve5({ kind: "aborted" });
+      };
+      args2.abortSignal?.addEventListener("abort", abortListener, { once: true });
+    }));
+    const outcome = guards.length ? await Promise.race([request3, ...guards]) : await request3;
+    if (timeoutHandle) clearTimeout(timeoutHandle);
+    if (abortListener) args2.abortSignal?.removeEventListener("abort", abortListener);
+    if (outcome.kind !== "done") {
+      const reason = outcome.kind === "timeout" ? "timeout" : outcome.kind === "aborted" ? "aborted" : "provider-error";
+      const detail = outcome.kind === "provider-error" ? outcome.error instanceof Error ? outcome.error.message : String(outcome.error) : reason === "timeout" ? `auto-compaction timed out after ${timeoutMs}ms` : "auto-compaction aborted";
+      throw Object.assign(new Error(detail), { compactionReason: reason });
+    }
+    const result4 = outcome.value;
     const newSummary = typeof result4.content === "string" ? result4.content.trim() : "";
     if (!newSummary) {
       console.warn(
         "[localLoop] auto-compaction produced empty summary; keeping prior projection"
       );
+      const failureReason = "provider-error";
+      emitPhase({ kind: "compaction-failed", reason: failureReason });
       return {
         ...projectExisting(),
-        failureMessage: "summary model returned empty content"
+        failureMessage: "summary model returned empty content",
+        failureReason,
+        decision: {
+          outcome: "failed",
+          reason: failureReason,
+          detail: "summary model returned empty content"
+        }
       };
     }
     await adapter.saveDialogSummary({
@@ -12538,6 +12839,7 @@ async function maybeAutoCompactLocalHistory(args2) {
       summaryUsage: result4.usage
     });
     console.log(formatCompactionMetricsLog(metrics));
+    emitPhase({ kind: "compaction-end" });
     return {
       history: projectHistoryWithSummary({
         history,
@@ -12550,223 +12852,55 @@ async function maybeAutoCompactLocalHistory(args2) {
       beforeTokens: metrics.previousSummaryTokens + metrics.compressedTokens,
       afterTokens: metrics.newSummaryTokens + metrics.retainedTokens,
       ...result4.usage ? { usage: result4.usage } : {},
-      metrics
+      metrics,
+      decision: {
+        outcome: "compressed",
+        trigger: invalidSummary ? "invalid-summary" : coldResume ? "cold-resume" : plan.diagnostics?.triggeredByRealUsage ? "real-usage" : "estimate",
+        ...plan.diagnostics ? {
+          estimatedTokens: plan.diagnostics.totalUsed,
+          historyBudget: plan.diagnostics.historyBudget,
+          triggerRatio: plan.diagnostics.triggerRatio,
+          ...plan.diagnostics.realUsageRatio !== void 0 ? { realUsageRatio: plan.diagnostics.realUsageRatio } : {}
+        } : {}
+      }
     };
   } catch (error) {
     console.warn("[localLoop] auto-compaction failed:", error);
     const failureMessage = error instanceof Error && error.message ? error.message.slice(0, 200) : String(error).slice(0, 200);
-    return { ...projectExisting(), failureMessage };
+    const failureReason = error instanceof Error && "compactionReason" in error ? error.compactionReason : "provider-error";
+    emitPhase({ kind: "compaction-failed", reason: failureReason });
+    return {
+      ...projectExisting(),
+      failureMessage,
+      failureReason,
+      decision: { outcome: "failed", reason: failureReason, detail: failureMessage }
+    };
   }
 }
 
-// packages/agent-runtime/progressGuard.ts
-var DEFAULT_MAX_CONSECUTIVE_IDENTICAL_ROUNDS = 5;
-var DEFAULT_MAX_CONSECUTIVE_STAGNANT_TOOL_ROUNDS = 8;
-function sortJsonKeys(obj) {
-  if (obj === null || typeof obj !== "object") return obj;
-  if (Array.isArray(obj)) return obj.map(sortJsonKeys);
-  const sorted = {};
-  for (const key of Object.keys(obj).sort()) {
-    sorted[key] = sortJsonKeys(obj[key]);
+// packages/agent-runtime/localLoop.ts
+var LOOP_TIMING_ENABLED = typeof process !== "undefined" && process.env?.NOLO_LOOP_TIMING === "1";
+var LOOP_TIMING_FILE = typeof process !== "undefined" ? process.env?.NOLO_LOOP_TIMING_FILE : void 0;
+var loopTimingRows = [];
+var loopTimingLastMark;
+function loopTimingMark(phase, round) {
+  if (!LOOP_TIMING_ENABLED) return;
+  const now = performance.now();
+  if (loopTimingLastMark !== void 0) {
+    loopTimingRows.push({ phase, round, durationMs: now - loopTimingLastMark });
   }
-  return sorted;
+  loopTimingLastMark = now;
 }
-function normalizeToolArguments(rawArgs) {
-  if (typeof rawArgs !== "string") {
+async function loopTimingFlush() {
+  if (!LOOP_TIMING_ENABLED) return;
+  const lines = loopTimingRows.map((row) => JSON.stringify(row)).join("\n");
+  loopTimingRows = [];
+  loopTimingLastMark = void 0;
+  if (!lines) return;
+  if (LOOP_TIMING_FILE) {
     try {
-      return JSON.stringify(sortJsonKeys(rawArgs ?? ""));
-    } catch {
-      return String(rawArgs ?? "");
-    }
-  }
-  const trimmed = rawArgs.trim();
-  if (!trimmed) return "";
-  try {
-    const parsed = JSON.parse(trimmed);
-    return JSON.stringify(sortJsonKeys(parsed));
-  } catch {
-    return trimmed;
-  }
-}
-function extractNormalizedContentText(content) {
-  if (typeof content === "string") return content.trim();
-  if (!Array.isArray(content)) return "";
-  return content.map((part) => {
-    if (part?.type === "text") return String(part.text ?? "").trim();
-    if (part?.type === "image_url") return `[img:${part.image_url?.url ?? ""}]`;
-    return "";
-  }).filter(Boolean).join("\n");
-}
-function buildToolCallsSignature(toolCalls) {
-  if (!toolCalls || toolCalls.length === 0) return "";
-  return toolCalls.map(
-    (tc) => `${tc.function?.name ?? ""}:${normalizeToolArguments(tc.function?.arguments)}`
-  ).join(";;");
-}
-function buildAssistantActionFingerprint(result4) {
-  const content = extractNormalizedContentText(result4.content);
-  const reasoning = typeof result4.reasoning_content === "string" ? result4.reasoning_content.trim() : "";
-  let toolCallsSig = buildToolCallsSignature(result4.tool_calls);
-  let hasToolCalls = Array.isArray(result4.tool_calls) && result4.tool_calls.length > 0;
-  if (!toolCallsSig && Array.isArray(result4.output) && result4.output.length > 0) {
-    const blocksToolCalls = result4.output.filter(
-      (b) => b.type === "toolCall"
-    ).map((b) => b.toolCall);
-    if (blocksToolCalls.length > 0) {
-      toolCallsSig = buildToolCallsSignature(blocksToolCalls);
-      hasToolCalls = true;
-    }
-  }
-  const hasNonEmptyText = content.length > 0 || reasoning.length > 0;
-  const fingerprint = `${content}##${reasoning}##${toolCallsSig}`;
-  return {
-    fingerprint,
-    hasNonEmptyText,
-    hasToolCalls,
-    toolCallsSignature: toolCallsSig
-  };
-}
-function buildToolResultsSignature(toolExecutions) {
-  if (toolExecutions.length === 0) return "";
-  return toolExecutions.map((exec) => {
-    const contentStr = typeof exec.content === "string" ? exec.content.trim() : "";
-    const metaStr = exec.metadata ? JSON.stringify(sortJsonKeys(exec.metadata)) : "";
-    return `${exec.toolName}:${contentStr}:${metaStr}`;
-  }).join(";;");
-}
-function resolveProgressGuardConfig(options, env = typeof process !== "undefined" ? process.env : {}) {
-  const envDisabled = env.NOLO_LOOP_PROGRESS_GUARD_DISABLED === "true" || env.NOLO_LOOP_PROGRESS_GUARD_DISABLED === "1";
-  const disabled = options?.disabled ?? envDisabled ?? false;
-  const parsePositiveInt = (val, fallback) => {
-    if (typeof val === "number" && Number.isFinite(val) && val >= 1) {
-      return Math.floor(val);
-    }
-    if (typeof val === "string") {
-      const parsed = parseInt(val, 10);
-      if (Number.isFinite(parsed) && parsed >= 1) {
-        return parsed;
-      }
-    }
-    return fallback;
-  };
-  const maxConsecutiveIdenticalRounds = parsePositiveInt(
-    options?.maxConsecutiveIdenticalRounds ?? env.NOLO_LOOP_MAX_IDENTICAL_ROUNDS,
-    DEFAULT_MAX_CONSECUTIVE_IDENTICAL_ROUNDS
-  );
-  const maxConsecutiveStagnantToolRounds = parsePositiveInt(
-    options?.maxConsecutiveStagnantToolRounds ?? env.NOLO_LOOP_MAX_STAGNANT_TOOL_ROUNDS,
-    DEFAULT_MAX_CONSECUTIVE_STAGNANT_TOOL_ROUNDS
-  );
-  return {
-    disabled,
-    maxConsecutiveIdenticalRounds,
-    maxConsecutiveStagnantToolRounds
-  };
-}
-var LocalLoopProgressGuard = class {
-  config;
-  lastAssistantFingerprint = null;
-  lastAssistantHasNonEmptyText = false;
-  consecutiveIdenticalCount = 0;
-  lastToolCallsSignature = null;
-  lastToolResultsSignature = null;
-  consecutiveStagnantToolCount = 0;
-  constructor(config, env) {
-    this.config = resolveProgressGuardConfig(config, env);
-  }
-  /**
-   * 在 LLM 返回 assistant 响应后调用。
-   * 仅在纯文本/无工具调用且实质文本相同达到阈值时直接熔断；
-   * 若存在工具调用，则不在此处熔断，留待工具执行后结合工具结果综合判定。
-   */
-  observeAssistantResponse(result4) {
-    if (this.config.disabled) return { action: "continue" };
-    const { fingerprint, hasNonEmptyText, hasToolCalls } = buildAssistantActionFingerprint(result4);
-    if (this.lastAssistantFingerprint !== null && this.lastAssistantFingerprint === fingerprint) {
-      this.consecutiveIdenticalCount += 1;
-      if (!hasToolCalls && hasNonEmptyText && this.consecutiveIdenticalCount >= this.config.maxConsecutiveIdenticalRounds) {
-        return {
-          action: "stall",
-          reason: "repetition_loop",
-          detail: `Consecutive identical text-only assistant response for ${this.consecutiveIdenticalCount} rounds.`,
-          consecutiveRounds: this.consecutiveIdenticalCount
-        };
-      }
-    } else {
-      this.lastAssistantFingerprint = fingerprint;
-      this.lastAssistantHasNonEmptyText = hasNonEmptyText;
-      this.consecutiveIdenticalCount = 1;
-    }
-    return { action: "continue" };
-  }
-  /**
-   * 在本轮所有工具执行完毕后调用，检查是否陷入停滞死循环。
-   * 只有当工具返回内容与元数据完全无变化时才计入无进展 streak；
-   * 一旦工具结果发生变化（如合法轮询状态推进），立即重置 identical streak，确保绝不误杀正常长任务。
-   */
-  observeToolExecution(toolCalls, toolResults) {
-    if (this.config.disabled) return { action: "continue" };
-    if (!toolCalls || toolCalls.length === 0) return { action: "continue" };
-    const toolCallsSig = buildToolCallsSignature(toolCalls);
-    const toolResultsSig = buildToolResultsSignature(toolResults);
-    const toolCallsUnchanged = this.lastToolCallsSignature !== null && this.lastToolCallsSignature === toolCallsSig;
-    const toolResultsUnchanged = this.lastToolResultsSignature !== null && this.lastToolResultsSignature === toolResultsSig;
-    if (toolCallsUnchanged && toolResultsUnchanged) {
-      this.consecutiveStagnantToolCount += 1;
-      if (this.consecutiveIdenticalCount >= this.config.maxConsecutiveIdenticalRounds) {
-        return {
-          action: "stall",
-          reason: "repetition_loop",
-          detail: `Consecutive identical assistant response with unchanged tool results for ${this.consecutiveIdenticalCount} rounds.`,
-          consecutiveRounds: this.consecutiveIdenticalCount
-        };
-      }
-      if (this.consecutiveStagnantToolCount >= this.config.maxConsecutiveStagnantToolRounds) {
-        return {
-          action: "stall",
-          reason: "stagnant_tool_calls",
-          detail: `Consecutive stagnant tool calls with unchanged results for ${this.consecutiveStagnantToolCount} rounds.`,
-          consecutiveRounds: this.consecutiveStagnantToolCount
-        };
-      }
-    } else {
-      this.lastToolCallsSignature = toolCallsSig;
-      this.lastToolResultsSignature = toolResultsSig;
-      this.consecutiveStagnantToolCount = 1;
-      if (!toolResultsUnchanged) {
-        this.consecutiveIdenticalCount = 1;
-      }
-    }
-    return { action: "continue" };
-  }
-};
-function createLocalLoopProgressGuard(config, env) {
-  return new LocalLoopProgressGuard(config, env);
-}
-
-// packages/agent-runtime/localLoop.ts
-var LOOP_TIMING_ENABLED = typeof process !== "undefined" && process.env?.NOLO_LOOP_TIMING === "1";
-var LOOP_TIMING_FILE = typeof process !== "undefined" ? process.env?.NOLO_LOOP_TIMING_FILE : void 0;
-var loopTimingRows = [];
-var loopTimingLastMark;
-function loopTimingMark(phase, round) {
-  if (!LOOP_TIMING_ENABLED) return;
-  const now = performance.now();
-  if (loopTimingLastMark !== void 0) {
-    loopTimingRows.push({ phase, round, durationMs: now - loopTimingLastMark });
-  }
-  loopTimingLastMark = now;
-}
-async function loopTimingFlush() {
-  if (!LOOP_TIMING_ENABLED) return;
-  const lines = loopTimingRows.map((row) => JSON.stringify(row)).join("\n");
-  loopTimingRows = [];
-  loopTimingLastMark = void 0;
-  if (!lines) return;
-  if (LOOP_TIMING_FILE) {
-    try {
-      const { appendFileSync } = await import("node:fs");
-      appendFileSync(LOOP_TIMING_FILE, lines + "\n");
+      const { appendFileSync } = await import("node:fs");
+      appendFileSync(LOOP_TIMING_FILE, lines + "\n");
     } catch {
     }
   } else {
@@ -12796,6 +12930,8 @@ function emitLoopEvent(boundary, event, bridge) {
   boundary.emit(bridge ? { event, bridge } : { event });
 }
 var LLM_REQUEST_TIMEOUT = "LLM_REQUEST_TIMEOUT";
+var DEFAULT_LLM_REQUEST_TIMEOUT_MS = 10 * 60 * 1e3;
+var DEFAULT_COMPACTION_TIMEOUT_MS = 60 * 1e3;
 var LOCAL_TURN_ABORTED_CODE = "LOCAL_TURN_ABORTED";
 function buildAbortedError() {
   const error = new Error("local agent turn aborted by user");
@@ -12823,8 +12959,11 @@ async function runAbortableToolTask(input, task, pendingToolName) {
 }
 function resolveLlmRequestTimeoutMs(input) {
   const raw = input.llmRequestTimeoutMs ?? input.timeoutMs;
-  if (typeof raw !== "number" || !Number.isFinite(raw) || raw <= 0) return void 0;
-  return raw;
+  return typeof raw === "number" && Number.isFinite(raw) && raw > 0 ? raw : DEFAULT_LLM_REQUEST_TIMEOUT_MS;
+}
+function resolveCompactionTimeoutMs(input) {
+  const raw = input.compactionTimeoutMs;
+  return typeof raw === "number" && Number.isFinite(raw) && raw > 0 ? raw : DEFAULT_COMPACTION_TIMEOUT_MS;
 }
 async function runCompleteWithTimeout(args2) {
   const { provider, messages, options, timeoutMs, round, input, boundary, context: context3, providerName, model } = args2;
@@ -12847,6 +12986,7 @@ async function runCompleteWithTimeout(args2) {
       const outcome = await runAbortableWithTimeout({
         task: complete,
         timeoutMs: typeof timeoutMs === "number" ? timeoutMs : void 0,
+        activityVersion: args2.activityVersion,
         abortSignal: input.abortSignal,
         runtime: input.effectRuntime
       });
@@ -12857,7 +12997,7 @@ async function runCompleteWithTimeout(args2) {
       }
       if (outcome.kind === "timeout") {
         const timeoutError = new Error(
-          `LLM request timed out after ${timeoutMs}ms (round ${round})`
+          `LLM request timed out after ${timeoutMs}ms without new output (idle window, round ${round})`
         );
         timeoutError.code = LLM_REQUEST_TIMEOUT;
         throw timeoutError;
@@ -13049,10 +13189,10 @@ var TOOL_METADATA_KEYS = [
   "pasteId",
   "source"
 ];
-function trimHistoryToContextBudget(history, model) {
+function trimHistoryToContextBudget(history, model, contextWindowOverride) {
   if (history.length === 0) return { history, droppedCount: 0 };
   const { rawMessageBudget } = planContextUsage({
-    contextWindow: getModelContextWindow(model ?? ""),
+    contextWindow: contextWindowOverride ?? getModelContextWindow(model ?? ""),
     summaryTokens: 0,
     // localLoop 没有 web 端的负载分档器；medium 是中性默认值，
     // 不为了省几个 token 在这里复制一份分类逻辑。
@@ -13515,7 +13655,14 @@ async function runLocalAgentTurn(input) {
       agentConfig.exposedToolNames ?? agentConfig.toolNames ?? []
     );
     const guidanceBlocks = buildRuntimeGuidanceBlocks(agentTools);
-    const toolGuidedSections = resolveToolGuidedSections(agentTools);
+    const toolGuidedSections = resolveToolGuidedSections(agentTools, {
+      // 单调锁定：历史里任一 user 消息命中派发关键词、或已出现过
+      // startAgentRun/controlAgentRun 的 tool_calls，后续每轮都保持 true，
+      // 防止 session-scope 的 agentCollaboration 段逐轮翻转击穿前缀缓存。
+      dispatchIntent: detectDispatchIntentFromMessages(history) || detectDispatchIntent(
+        typeof input.input === "string" ? input.input : void 0
+      )
+    });
     const guidanceScopes = [
       ...input.userLanguage?.trim() ? [buildUserResponseLanguageContext({ language: input.userLanguage })] : [],
       guidanceBlocks.startupProtocol,
@@ -13531,6 +13678,9 @@ async function runLocalAgentTurn(input) {
       input.contextBlockScopes
     );
     const mergedContextBlockScopes = [
+      // 删除安全红线：系统层最高优先级约束，位于所有块之前（含身份信息块），
+      // owner 要求常驻「根本提示词」的最顶部（2026-09-26 批量误删事故）。
+      { content: DELETE_SAFETY_RED_LINE, cacheScope: "session" },
       { content: identityBlock, cacheScope: "session" },
       ...guidanceScopes,
       ...callerScopes
@@ -13543,7 +13693,7 @@ async function runLocalAgentTurn(input) {
       }
       return resolvedProvider;
     };
-    const contextWindow = getModelContextWindow(agentConfig.model ?? "");
+    const contextWindow = resolveAgentContextWindow(agentConfig);
     const compressionTriggerRatio = resolveCompressionTriggerRatio(contextWindow);
     let realContextUsagePercent;
     if (input.continueDialogId && typeof input.adapter.loadLastContextUsage === "function") {
@@ -13563,20 +13713,40 @@ async function runLocalAgentTurn(input) {
       }
     }
     let compactionUsage;
+    const emitCompactionPhase = (phase, scope3) => {
+      const atMs = Date.now();
+      if (phase.kind === "validating-context") emitLoopEvent(observationBoundary, { kind: "turn-phase", phase: "validating-context", atMs, compactionScope: scope3 });
+      else if (phase.kind === "compaction-start") {
+        emitLoopEvent(observationBoundary, { kind: "turn-phase", phase: "compacting", atMs, compactionScope: scope3 });
+        emitLoopEvent(observationBoundary, { kind: "compaction-start", atMs, scope: scope3 });
+      } else if (phase.kind === "waiting-provider") emitLoopEvent(observationBoundary, { kind: "turn-phase", phase: "waiting-provider", atMs, compactionScope: scope3 });
+      else if (phase.kind === "compaction-end") emitLoopEvent(observationBoundary, { kind: "compaction-end", atMs, scope: scope3 });
+      else emitLoopEvent(observationBoundary, { kind: "compaction-failed", atMs, scope: scope3, reason: phase.reason });
+    };
     const emitCompactionObservation = (compacted) => {
-      if (compacted.compressed || compacted.summaryGenerated || compacted.failureMessage) {
-        emitLoopEvent(observationBoundary, {
-          kind: "compaction",
-          atMs: Date.now(),
-          reason: compacted.reason ?? "context_budget",
-          summaryGenerated: compacted.summaryGenerated,
-          compressed: compacted.compressed,
-          ...compacted.failureMessage ? { failed: true, detail: compacted.failureMessage } : {},
-          ...compacted.beforeTokens !== void 0 ? { beforeTokens: compacted.beforeTokens } : {},
-          ...compacted.afterTokens !== void 0 ? { afterTokens: compacted.afterTokens } : {},
-          ...compacted.savedTokens !== void 0 ? { savedTokens: compacted.savedTokens } : {}
-        });
+      const decision = compacted.decision;
+      if (decision?.outcome === "skipped") {
+        const isProtectionGap = decision.skipReason === "adapter-missing-summary-methods" || decision.skipReason === "load-summary-failed";
+        const approachingBudget = decision.skipReason === "below-trigger" && typeof decision.estimatedTokens === "number" && typeof decision.historyBudget === "number" && decision.historyBudget > 0 && decision.estimatedTokens >= decision.historyBudget * 0.5;
+        if (!isProtectionGap && !approachingBudget) return;
       }
+      emitLoopEvent(observationBoundary, {
+        kind: "compaction",
+        atMs: Date.now(),
+        ...compacted.reason ? { reason: compacted.reason } : {},
+        summaryGenerated: compacted.summaryGenerated,
+        compressed: compacted.compressed,
+        ...compacted.failureMessage ? { failed: true, detail: compacted.failureMessage } : {},
+        ...decision?.outcome === "skipped" ? { skipped: true, skipReason: decision.skipReason } : {},
+        ...decision && "trigger" in decision && decision.trigger ? { trigger: decision.trigger } : {},
+        ...decision && "estimatedTokens" in decision && decision.estimatedTokens !== void 0 ? { estimatedTokens: decision.estimatedTokens } : {},
+        ...decision && "historyBudget" in decision && decision.historyBudget !== void 0 ? { historyBudget: decision.historyBudget } : {},
+        ...decision && "realUsageRatio" in decision && decision.realUsageRatio !== void 0 ? { realUsageRatio: decision.realUsageRatio } : {},
+        ...decision && "triggerRatio" in decision && decision.triggerRatio !== void 0 ? { triggerRatio: decision.triggerRatio } : {},
+        ...compacted.beforeTokens !== void 0 ? { beforeTokens: compacted.beforeTokens } : {},
+        ...compacted.afterTokens !== void 0 ? { afterTokens: compacted.afterTokens } : {},
+        ...compacted.savedTokens !== void 0 ? { savedTokens: compacted.savedTokens } : {}
+      });
     };
     try {
       const compacted = await maybeAutoCompactLocalHistory({
@@ -13585,7 +13755,11 @@ async function runLocalAgentTurn(input) {
         history,
         model: agentConfig.model,
         resolveProvider: resolveProviderOnce,
-        realContextUsagePercent
+        contextWindow,
+        realContextUsagePercent,
+        abortSignal: input.abortSignal,
+        timeoutMs: resolveCompactionTimeoutMs(input),
+        onPhase: (phase) => emitCompactionPhase(phase, "initial")
       });
       history = compacted.history;
       compactionUsage = compacted.usage;
@@ -13594,7 +13768,7 @@ async function runLocalAgentTurn(input) {
       console.warn("[localLoop] auto-compaction unexpected error:", error);
     }
     loopTimingMark("maybeAutoCompactLocalHistory", 0);
-    const trimmedHistory = trimHistoryToContextBudget(history, agentConfig.model);
+    const trimmedHistory = trimHistoryToContextBudget(history, agentConfig.model, contextWindow);
     if (trimmedHistory.droppedCount > 0) {
       history = trimmedHistory.history;
     }
@@ -13656,17 +13830,26 @@ async function runLocalAgentTurn(input) {
     let skipFinalAppend = false;
     let partialContent = "";
     const progressGuard = createLocalLoopProgressGuard(input.progressGuardConfig);
+    let ephemeralSummary = null;
+    const ephemeralDialogId = `ephemeral-${crypto.randomUUID()}`;
+    const compactionAdapter = input.continueDialogId ? input.adapter : {
+      ...input.adapter,
+      loadDialogSummary: async () => ephemeralSummary,
+      saveDialogSummary: async (summaryInput) => {
+        ephemeralSummary = summaryInput;
+      }
+    };
+    const compactionDialogId = input.continueDialogId ?? ephemeralDialogId;
     const maybeCompactInLoop = async () => {
-      if (!input.continueDialogId) return;
-      if (!contextUsage) return;
-      const inputTokens = normalizeUsage(contextUsage).input_tokens;
-      if (!inputTokens || inputTokens <= 0) return;
-      const ratio = Math.min(1, inputTokens / contextWindow);
-      if (ratio < compressionTriggerRatio) return;
+      const inputTokens = contextUsage ? normalizeUsage(contextUsage).input_tokens : 0;
+      const ratio = inputTokens > 0 ? Math.min(1, inputTokens / contextWindow) : void 0;
+      if (ratio !== void 0 && ratio < compressionTriggerRatio * 0.85) {
+        return;
+      }
       try {
         const compacted = await maybeAutoCompactLocalHistory({
-          adapter: input.adapter,
-          dialogId: input.continueDialogId,
+          adapter: compactionAdapter,
+          dialogId: compactionDialogId,
           // canonical 坐标：store 全量历史 + 本轮消息的「持久化形态」
           // （applyPersistedTurnInput 会把首条 user 消息换成 paste 展开形态）。
           // 锚点与 sourceHash 都必须按持久化形态计算——否则下轮从 store
@@ -13681,7 +13864,11 @@ async function runLocalAgentTurn(input) {
           ],
           model: agentConfig.model,
           resolveProvider: resolveProviderOnce,
-          realContextUsagePercent: ratio
+          contextWindow,
+          ...ratio !== void 0 ? { realContextUsagePercent: ratio } : {},
+          abortSignal: input.abortSignal,
+          timeoutMs: resolveCompactionTimeoutMs(input),
+          onPhase: (phase) => emitCompactionPhase(phase, "in-loop")
         });
         if (compacted.usage) {
           compactionUsage = addOutOfBandUsage(compactionUsage, compacted.usage);
@@ -13751,11 +13938,12 @@ async function runLocalAgentTurn(input) {
         const shouldPassToolEvents = Boolean(
           input.onToolEvent || input.onObservationEvent || input.observationBoundary
         );
+        let llmStreamActivity = 0;
         result4 = await runCompleteWithTimeout({
           provider,
           messages: requestMessages,
           options: {
-            ...typeof input.timeoutMs === "number" ? { timeoutMs: input.timeoutMs } : {},
+            timeoutMs: resolveLlmRequestTimeoutMs(input),
             // 用户取消信号穿进 provider options：providerStreamRetry 据此在
             // 取消后跳过重试，provider 分支（如 antigravity/openai-compatible）
             // 也可把 fetch 绑定到同一信号，实现真正的传输层取消。
@@ -13764,6 +13952,7 @@ async function runLocalAgentTurn(input) {
             // 归到具体对话而不是 chat-proxy 兜底桶。新对话首轮 id 尚未分配。
             ...input.continueDialogId ? { dialogId: input.continueDialogId } : {},
             ...shouldStreamDeltas ? { onTextDelta: (chunk) => {
+              llmStreamActivity += 1;
               partialContent += chunk;
               observationBoundary.emit({
                 kind: "text-delta",
@@ -13773,6 +13962,7 @@ async function runLocalAgentTurn(input) {
               });
             } } : {},
             ...shouldStreamReasoning ? { onReasoningDelta: (chunk) => {
+              llmStreamActivity += 1;
               observationBoundary.emit({
                 kind: "reasoning-delta",
                 chunk,
@@ -13781,6 +13971,7 @@ async function runLocalAgentTurn(input) {
               });
             } } : {},
             ...shouldPassToolEvents ? { onToolEvent: (event) => {
+              llmStreamActivity += 1;
               observationBoundary.emit({
                 kind: "tool-event",
                 event,
@@ -13791,6 +13982,7 @@ async function runLocalAgentTurn(input) {
             ...shouldPassToolEvents ? { toolEventRound: round } : {}
           },
           timeoutMs: resolveLlmRequestTimeoutMs(input),
+          activityVersion: () => llmStreamActivity,
           round,
           input,
           boundary: observationBoundary,
@@ -13949,6 +14141,7 @@ ${reasoningTailLog}
           const startedAt = Date.now();
           loopTimingMark("toolCallStart", round);
           const argumentsPreview = summarizeToolArguments(toolName, toolCall.function.arguments);
+          const argumentsFingerprint = buildToolArgumentsFingerprint(toolCall.function.arguments);
           emitLoopEvent(
             observationBoundary,
             {
@@ -13957,7 +14150,8 @@ ${reasoningTailLog}
               toolCallId: toolCall.id,
               toolName,
               atMs: startedAt,
-              ...argumentsPreview ? { argumentsPreview } : {}
+              ...argumentsPreview ? { argumentsPreview } : {},
+              ...argumentsFingerprint ? { argumentsFingerprint } : {}
             },
             {
               type: "tool-call",
@@ -14270,23 +14464,6 @@ function kimiIdentityHeaders(url) {
   return isKimiEndpoint(url) ? { "User-Agent": KIMI_CODE_USER_AGENT } : {};
 }
 
-// packages/agent-runtime/sseDataLine.ts
-function parseSseDataLineJson(line) {
-  const trimmed = line.trim();
-  if (!trimmed.startsWith("data:")) return null;
-  const payload = trimmed.slice(5).trim();
-  if (!payload || payload === "[DONE]") return null;
-  try {
-    return JSON.parse(payload);
-  } catch {
-    return null;
-  }
-}
-function parseSseDataLineObject(line) {
-  const parsed = parseSseDataLineJson(line);
-  return parsed && typeof parsed === "object" ? parsed : null;
-}
-
 // packages/integrations/openai/responsesRequestBody.ts
 function buildResponsesRequestBody(body, model) {
   const tools = Array.isArray(body.tools) ? toResponsesTools(body.tools) : void 0;
@@ -15556,142 +15733,17 @@ async function evaluateCapabilityPolicy(capability, normalizedInput, ctx) {
   }
 }
 
-// packages/agent-runtime/localToolPolicy.ts
-var NEVER_LOCAL_TOOLS = /* @__PURE__ */ new Set([
-  "deleteSpaces",
-  "updateAgent",
-  "updateSelf",
-  "createAgent"
-]);
-var DEFAULT_LOCAL_TOOLS = /* @__PURE__ */ new Set([
-  "readFile",
-  "writeFile",
-  "editFile",
-  "globFiles",
-  "execShell",
-  "launchProcess",
-  "listProcesses",
-  // ProcessTask follow-up tools (Phase 1). Same tier as listProcesses: they
-  // observe/stop tasks the agent itself already spawned, so their blast radius
-  // is strictly narrower than launchProcess (which is default-enabled).
-  "taskWait",
-  "taskLogs",
-  "taskStop",
-  // Scheduling tools: forking/observing sub-agents is a declared capability
-  // of capable agents, and the blast radius is strictly narrower than
-  // execShell (already default-enabled). Requiring an env allowlist for these
-  // while execShell is open by default inverted the risk model and forced every
-  // new local user to hand-edit .env files before sub-agent tasks worked.
-  "startAgentRun",
-  "controlAgentRun"
-]);
-function parseToolAllowlist(value) {
-  return (value ?? "").split(",").flatMap((item) => {
-    const trimmed = item.trim();
-    return trimmed ? [trimmed] : [];
-  });
-}
-function normalizeLocalToolName(toolName) {
-  return canonicalizeToolName(
-    String(toolName ?? "").replace(/^functions\./, "").trim()
-  );
-}
-function isRestrictedLocalToolMode(env) {
-  return env.NOLO_LOCAL_TOOL_MODE === "restricted";
-}
-function resolveLocalToolPolicy(args2) {
-  const toolName = normalizeLocalToolName(args2.toolName);
-  const restrictedMode = isRestrictedLocalToolMode(args2.env);
-  if (!toolName) {
-    return {
-      allowed: false,
-      toolName,
-      reason: "Tool name is required."
-    };
-  }
-  if (NEVER_LOCAL_TOOLS.has(toolName)) {
-    return {
-      allowed: false,
-      toolName,
-      reason: `${toolName} is blocked by the local runtime safety policy.`
-    };
-  }
-  const allowedByEnv = new Set(parseToolAllowlist(args2.env.NOLO_LOCAL_ALLOWED_TOOLS));
-  const agentTools = new Set(
-    (args2.agentToolNames ?? []).flatMap((item) => {
-      const normalized = normalizeLocalToolName(item);
-      return normalized ? [normalized] : [];
-    })
-  );
-  if (!restrictedMode && agentTools.has(toolName)) {
-    return { allowed: true, toolName };
-  }
-  if (DEFAULT_LOCAL_TOOLS.has(toolName) && agentTools.has(toolName)) {
-    return { allowed: true, toolName };
-  }
-  if (allowedByEnv.has(toolName) && agentTools.has(toolName)) {
-    return { allowed: true, toolName };
-  }
-  return {
-    allowed: false,
-    toolName,
-    reason: `${toolName} is not enabled for local runtime runs. The agent must declare the tool in its manifest; in restricted mode (NOLO_LOCAL_TOOL_MODE=restricted) non-default tools also require adding to NOLO_LOCAL_ALLOWED_TOOLS (e.g. NOLO_LOCAL_ALLOWED_TOOLS=someCustomTool) and restarting the session so the env var loads.`
-  };
-}
-async function executeLocalToolWithPolicy(args2) {
-  if (args2.runToolNames !== void 0 && !args2.runToolNames.includes(normalizeLocalToolName(args2.call.name))) {
-    throw new Error(`${args2.call.name} is outside the final run tool surface.`);
-  }
-  const decision = resolveLocalToolPolicy({
-    env: args2.env,
-    agentToolNames: args2.agentToolNames,
-    toolName: args2.call.name
-  });
-  if (!decision.allowed) throw new Error(decision.reason);
-  const executor = args2.executors?.[decision.toolName];
-  if (!executor) {
-    throw new Error(`${decision.toolName} is allowed by policy but no local executor is registered.`);
-  }
-  const opts = {
-    ...args2.abortSignal ? { abortSignal: args2.abortSignal } : {},
-    ...args2.detachMs !== void 0 ? { detachMs: args2.detachMs } : {},
-    ...args2.confirmed !== void 0 ? { confirmed: args2.confirmed } : {},
-    ...args2.enableDestructiveShellGuard !== void 0 ? { enableDestructiveShellGuard: args2.enableDestructiveShellGuard } : {},
-    ...args2.confirmDestructiveAction ? { confirmDestructiveAction: args2.confirmDestructiveAction } : {},
-    ...args2.blockDestructiveWithoutConfirmation !== void 0 ? { blockDestructiveWithoutConfirmation: args2.blockDestructiveWithoutConfirmation } : {}
-  };
-  if (decision.toolName === "execShell") {
-    let parsedInput = args2.call.arguments;
-    if (typeof parsedInput === "string") {
-      try {
-        parsedInput = JSON.parse(parsedInput);
-      } catch {
-        parsedInput = { command: parsedInput };
-      }
-    }
-    await evaluateExecShellDestructiveGuard(parsedInput, opts);
-    opts.confirmed = true;
-  }
-  return executor(
-    {
-      ...args2.call,
-      name: decision.toolName
-    },
-    opts
-  );
-}
-
-// packages/agent-runtime/localWorkspaceTools.ts
-import { existsSync as existsSync3 } from "node:fs";
-import { createHash as createHash3 } from "node:crypto";
-import { lstat, mkdir, readdir as readdir2, readFile as readFile3, realpath, stat as stat3, writeFile } from "node:fs/promises";
-import { homedir } from "node:os";
-import { dirname, isAbsolute as isAbsolute2, relative as relative3, resolve as resolve4, sep } from "node:path";
-import { spawn as spawnChildProcess3 } from "node:child_process";
-
-// packages/core/readRangeLedger.ts
-function filterRetainedLedgerRecords(records, retainedCap) {
-  return records.filter((record) => record.chars <= retainedCap);
+// packages/agent-runtime/localWorkspaceTools.ts
+import { existsSync as existsSync3 } from "node:fs";
+import { createHash as createHash3 } from "node:crypto";
+import { lstat, mkdir, readdir as readdir2, readFile as readFile3, realpath, stat as stat3, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, isAbsolute as isAbsolute2, relative as relative3, resolve as resolve4, sep } from "node:path";
+import { spawn as spawnChildProcess3 } from "node:child_process";
+
+// packages/core/readRangeLedger.ts
+function filterRetainedLedgerRecords(records, retainedCap) {
+  return records.filter((record) => record.chars <= retainedCap);
 }
 function isValidRange(range3) {
   return Number.isInteger(range3.startLine) && Number.isInteger(range3.endLine) && range3.endLine >= range3.startLine;
@@ -16479,29 +16531,6 @@ function getProcessRegistry() {
   return registry;
 }
 
-// packages/agent-runtime/processOwnership.ts
-var asNonEmptyString = (value) => {
-  if (typeof value !== "string") return null;
-  const trimmed = value.trim();
-  return trimmed ? trimmed : null;
-};
-function readProcessOwner(runtimeContext) {
-  if (!runtimeContext || typeof runtimeContext !== "object") return null;
-  const dialogId = asNonEmptyString(runtimeContext.dialogId) ?? asNonEmptyString(runtimeContext.parentThreadId);
-  if (!dialogId) return null;
-  const turnId = asNonEmptyString(runtimeContext.turnId);
-  const ownerId = asNonEmptyString(runtimeContext.ownerId);
-  return {
-    dialogId,
-    ...turnId ? { turnId } : {},
-    ...ownerId ? { ownerId } : {}
-  };
-}
-
-// packages/agent-runtime/workspaceShell.ts
-import { resolve as resolve3 } from "node:path";
-import { spawn as spawnChildProcess2 } from "node:child_process";
-
 // packages/agent-runtime/processTaskResult.ts
 var PROCESS_RESULT_CAPSULE_TAIL_CHARS = 4e3;
 var PROCESS_RESULT_CAPSULE_SPILL_THRESHOLD_CHARS = 2e4;
@@ -16521,11 +16550,17 @@ function buildProcessTaskResultCapsule(args2) {
   const exitCode = args2.exitCode;
   const captureError = args2.captureError?.trim() || void 0;
   const durationMs = typeof args2.startedAt === "number" && Number.isFinite(args2.startedAt) ? Math.max(0, (args2.endedAt ?? Date.now()) - args2.startedAt) : void 0;
-  const stdoutTail = tailText(stdout, tailChars);
-  const stderrTail = tailText(stderr, tailChars);
+  const stdoutProvenance = args2.streamProvenance?.stdout;
+  const stderrProvenance = args2.streamProvenance?.stderr;
+  const ringEvicted = Boolean(stdoutProvenance?.evicted || stderrProvenance?.evicted);
+  const stdoutTailSource = typeof args2.stdoutTail === "string" ? args2.stdoutTail : stdout;
+  const stderrTailSource = typeof args2.stderrTail === "string" ? args2.stderrTail : stderr;
+  const stdoutTail = tailText(stdoutTailSource, tailChars);
+  const stderrTail = tailText(stderrTailSource, tailChars);
   const inlineSize = stdout.length + stderr.length;
   const inlineTruncated = stdoutTail.truncated || stderrTail.truncated;
-  const shouldSpill = inlineTruncated || inlineSize > spillThresholdChars;
+  const truncated = inlineTruncated || ringEvicted || Boolean(captureError);
+  const shouldSpill = truncated || inlineSize > spillThresholdChars;
   let spill;
   if (shouldSpill) {
     try {
@@ -16539,8 +16574,11 @@ function buildProcessTaskResultCapsule(args2) {
       });
       spill = {
         displayPath: result4.displayPath,
-        totalChars: result4.totalChars,
-        totalLines: result4.totalLines
+        // Prefer the caller's live provenance counters: they count every
+        // byte of the original stream, while the buffered content above may
+        // be a capped prefix of it.
+        totalChars: (stdoutProvenance?.totalChars ?? stdout.length) + (stderrProvenance?.totalChars ?? stderr.length),
+        totalLines: (stdoutProvenance?.totalLines ?? countLines(stdout)) + (stderrProvenance?.totalLines ?? countLines(stderr))
       };
     } catch {
     }
@@ -16551,12 +16589,33 @@ function buildProcessTaskResultCapsule(args2) {
     exitCode,
     ...durationMs !== void 0 ? { durationMs } : {},
     ...captureError ? { captureError } : {},
-    truncated: inlineTruncated || Boolean(captureError),
+    truncated,
     ...spill ? { spill } : {}
   };
 }
 
+// packages/agent-runtime/processOwnership.ts
+var asNonEmptyString = (value) => {
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  return trimmed ? trimmed : null;
+};
+function readProcessOwner(runtimeContext) {
+  if (!runtimeContext || typeof runtimeContext !== "object") return null;
+  const dialogId = asNonEmptyString(runtimeContext.dialogId) ?? asNonEmptyString(runtimeContext.parentThreadId);
+  if (!dialogId) return null;
+  const turnId = asNonEmptyString(runtimeContext.turnId);
+  const ownerId = asNonEmptyString(runtimeContext.ownerId);
+  return {
+    dialogId,
+    ...turnId ? { turnId } : {},
+    ...ownerId ? { ownerId } : {}
+  };
+}
+
 // packages/agent-runtime/workspaceShell.ts
+import { resolve as resolve3 } from "node:path";
+import { spawn as spawnChildProcess2 } from "node:child_process";
 var EXEC_SHELL_TIMEOUT_ENV = "NOLO_EXEC_SHELL_TIMEOUT_MS";
 var EXEC_SHELL_DETACH_ENV = "NOLO_EXEC_SHELL_DETACH_MS";
 var DEFAULT_EXEC_SHELL_DETACH_MS = 12e4;
@@ -17425,13 +17484,169 @@ function runTasks(args2) {
   return { tasks, count: tasks.length };
 }
 
+// packages/agent-runtime/execShellCompletionWarnings.ts
+var BG_ESCAPE_WORD_PATTERN = /(?:^|[\s;|(&/\\])(nohup|disown|setsid|start-process)(?=$|[\s;|)&])/i;
+var SHELL_SPLIT_CHARS = /* @__PURE__ */ new Set([";", "|", "&", "(", ")", "<", ">", "\n", "	", " "]);
+function maskQuotedAndEscaped(command) {
+  const out = Array.from(command);
+  let quote = null;
+  for (let i = 0; i < out.length; i += 1) {
+    const ch = out[i];
+    if (quote) {
+      out[i] = " ";
+      if (ch === "\\" && quote !== "'") {
+        if (i + 1 < out.length) out[i + 1] = " ";
+        i += 1;
+      } else if (ch === quote) {
+        quote = null;
+      }
+      continue;
+    }
+    if (ch === "\\") {
+      out[i] = " ";
+      if (i + 1 < out.length) out[i + 1] = " ";
+      i += 1;
+      continue;
+    }
+    if (ch === "'" || ch === '"' || ch === "`") {
+      quote = ch;
+      out[i] = " ";
+      continue;
+    }
+    if (ch === "#" && (i === 0 || /[\s;]/.test(out[i - 1] ?? " "))) {
+      while (i < out.length && out[i] !== "\n") {
+        out[i] = " ";
+        i += 1;
+      }
+    }
+  }
+  return out.join("");
+}
+function readRedirectTarget(original, start) {
+  let i = start;
+  while (i < original.length && /\s/.test(original[i] ?? "")) {
+    i += 1;
+  }
+  if (i >= original.length) return void 0;
+  let text = "";
+  let j = i;
+  while (j < original.length) {
+    const o = original[j];
+    if (o === "'" || o === '"' || o === "`") {
+      const quote = o;
+      j += 1;
+      while (j < original.length && original[j] !== quote) {
+        if (original[j] === "\\" && quote !== "'" && j + 1 < original.length) {
+          text += original[j + 1];
+          j += 2;
+          continue;
+        }
+        text += original[j];
+        j += 1;
+      }
+      j += 1;
+      continue;
+    }
+    if (/\s/.test(o) || SHELL_SPLIT_CHARS.has(o)) break;
+    text += o;
+    j += 1;
+  }
+  if (!text || text === "$") return void 0;
+  return { text, end: j };
+}
+function isIgnoredRedirectTarget(target) {
+  return target === "/dev/null";
+}
+function detectExecShellSynchronousWarnings(command, shell) {
+  const masked = maskQuotedAndEscaped(command);
+  const isPowerShell = shell?.resolvedShell === "powershell";
+  const redirectTargets = [];
+  let backgrounded = false;
+  let i = 0;
+  while (i < masked.length) {
+    const ch = masked[i];
+    if (ch === "&") {
+      const next = masked[i + 1];
+      if (next === "&") {
+        i += 2;
+        continue;
+      }
+      if (next === ">") {
+        let j = i + 2;
+        if (masked[j] === ">") j += 1;
+        const target = readRedirectTarget(command, j);
+        if (target && !isIgnoredRedirectTarget(target.text)) redirectTargets.push(target.text);
+        i = target ? target.end : j;
+        continue;
+      }
+      const prev = masked[i - 1];
+      if (prev === ">" || prev === "<") {
+        i += 1;
+        continue;
+      }
+      if (isPowerShell) {
+        i += 1;
+        continue;
+      }
+      backgrounded = true;
+      i += 1;
+      continue;
+    }
+    if (ch === ">") {
+      const prev = masked[i - 1];
+      if (prev === ">" || prev === "&" || prev === "<") {
+        i += 1;
+        continue;
+      }
+      let j = i + 1;
+      if (masked[j] === ">") j += 1;
+      if (masked[j] === "&") {
+        const ampTarget = readRedirectTarget(command, j + 1);
+        const isFdDuplication = ampTarget !== void 0 && (/^\d+$/.test(ampTarget.text) || ampTarget.text === "-");
+        if (ampTarget && !isFdDuplication && !isIgnoredRedirectTarget(ampTarget.text)) {
+          redirectTargets.push(ampTarget.text);
+        }
+        i = ampTarget ? ampTarget.end : j + 1;
+        continue;
+      }
+      const target = readRedirectTarget(command, j);
+      if (target && !isIgnoredRedirectTarget(target.text)) redirectTargets.push(target.text);
+      i = target ? target.end : j;
+      continue;
+    }
+    if (ch === "<") {
+      i += masked[i + 1] === "<" || masked[i + 1] === "&" ? 2 : 1;
+      continue;
+    }
+    i += 1;
+  }
+  const wordMatch = BG_ESCAPE_WORD_PATTERN.exec(masked);
+  if (wordMatch) backgrounded = true;
+  const warnings = [];
+  if (redirectTargets.length > 0) {
+    const target = redirectTargets[0];
+    warnings.push({
+      kind: "output-redirect",
+      redirectTarget: target,
+      message: `[wake-safety] This execShell call completed synchronously; its output was redirected to ${target}. That file is NOT delivered by any completion notification \u2014 no tracked background task was created. If you need the result, read that file in this turn.`
+    });
+  }
+  if (backgrounded) {
+    warnings.push({
+      kind: "shell-backgrounding",
+      message: `[wake-safety] Detected shell-internal backgrounding (lone \`&\`, nohup/disown/setsid/Start-Process or similar). Descendant processes are NOT tracked as platform tasks and will not produce completion notifications; text such as \`LAUNCHED\` printed by the command is plain stdout, not a platform receipt.`
+    });
+  }
+  return warnings;
+}
+
 // packages/agent-runtime/capabilities/execShellCapability.ts
 function buildExecShellToolDefinition(toolName = "execShell") {
   return {
     type: "function",
     function: {
       name: toolName,
-      description: `Execute a shell command from the workspace root. Prefer one compound command (e.g. 'git status && git diff --stat') to perform complete verification in one step instead of multiple small roundtrips. Do not cd into guessed paths; commands already run from the workspace root. Commands block until exit. Long-running commands (sleep over ${IMMEDIATE_DETACH_SLEEP_THRESHOLD_SECONDS}s, dev servers, watchers) automatically detach to background returning {detached: true, pid, label}; for persistent services, prefer launchProcess. On Windows the resolved shell may be Windows PowerShell 5.1 (metadata.shellKind="powershell5"): it does not support '&&'/'||' or $PSStyle \u2014 join commands with ';' or split into multiple calls. metadata.shellKind="pwsh" means PowerShell 7+ with full syntax. Read resolvedShell/shellKind from any execShell result before writing Windows-specific syntax.`,
+      description: `Execute a shell command from the workspace root. Prefer one compound command (e.g. 'git status && git diff --stat') to perform complete verification in one step instead of multiple small roundtrips. Do not cd into guessed paths; commands already run from the workspace root. Commands block until exit. Long-running commands (sleep over ${IMMEDIATE_DETACH_SLEEP_THRESHOLD_SECONDS}s, dev servers, watchers) automatically detach to background returning {detached: true, pid, label}; for persistent services, prefer launchProcess. On Windows the resolved shell may be Windows PowerShell 5.1 (metadata.shellKind="powershell5"): it does not support '&&'/'||' or $PSStyle \u2014 join commands with ';' or split into multiple calls. metadata.shellKind="pwsh" means PowerShell 7+ with full syntax. Read resolvedShell/shellKind from any execShell result before writing Windows-specific syntax. LIFECYCLE CONTRACT (misreading this contract silenced a real dialog for 10 hours): (1) A normal command waits synchronously for at most 120 seconds; if it ends inside that window the call IS finished \u2014 a result containing exitCode means the command has already completed, never "still running". (2) Only a result with metadata.detached === true AND a taskId represents a tracked background task that may trigger completion wake-up (terminal completion turn carrying a bounded result capsule); that handle may be waited on with taskWait and will produce a completion notification. (3) Text the command itself prints (LAUNCHED, STARTED, BACKGROUND, ...) is plain stdout with zero lifecycle meaning \u2014 never read it as a platform receipt. (4) Shell-level backgrounding (\`&\`, nohup, disown, setsid, self-daemonizing scripts, PowerShell Start-Process) is NOT tracked: those descendants produce no completion notification, and the outer shell finishing tells you nothing about them. Use background: true to turn a finite job into a tracked background task immediately. When a synchronous result's core output was redirected to a file, read that file in the SAME turn \u2014 never end the turn promising a later automatic report without a taskId.`,
       parameters: {
         type: "object",
         properties: {
@@ -17442,6 +17657,10 @@ function buildExecShellToolDefinition(toolName = "execShell") {
           cmd: {
             type: "string",
             description: "Compatibility alias for command."
+          },
+          background: {
+            type: "boolean",
+            description: "Immediately detach this command into a tracked background task (no 120s synchronous wait): returns {detached: true, taskId}, and on completion the platform resumes this conversation with a bounded result capsule (exitCode, duration, stdout/stderr tail). Default false. Use for finite jobs (tests, builds, batch) whose result you need later; NOT for dev servers/watchers \u2014 use launchProcess for those."
           }
         }
       }
@@ -17482,11 +17701,13 @@ function normalizeExecShellInput(input) {
       throw new Error("execShell requires a non-empty command.");
     }
     const activity = extractActivity(record);
+    const background = record.background === true || typeof record.background === "string" && record.background.trim().toLowerCase() === "true";
     return {
       command,
       ...record.shell !== void 0 ? { shell: record.shell } : {},
       ...activity ? { activity } : {},
-      ...record.input !== void 0 ? { input: record.input } : {}
+      ...record.input !== void 0 ? { input: record.input } : {},
+      ...background ? { background: true } : {}
     };
   }
   throw new Error("execShell requires a non-empty command.");
@@ -17524,6 +17745,7 @@ var execShellCapability = {
       command,
       shell: normalized.shell
     });
+    const background = normalized.background === true;
     const result4 = await runWorkspaceCommand({
       workspaceRoot,
       command: shellPlan.argv,
@@ -17531,15 +17753,18 @@ var execShellCapability = {
       outputLimit: ctx.commandOutputLimit,
       commandPrefix: ctx.commandPrefix,
       abortSignal: ctx.abortSignal,
-      detachMs: isImmediateDetachShellCommand({ command }) ? 0 : ctx.detachMs,
+      detachMs: background ? 0 : isImmediateDetachShellCommand({ command }) ? 0 : ctx.detachMs,
       stdin: typeof normalized.input === "string" ? normalized.input : void 0,
       // Ownership of the turn that invoked this command: an auto-detached
       // command keeps its parent dialog so its terminal can resume that
       // conversation (see processOwnership.ts). Absent ctx.owner = unowned.
       owner: ctx.owner ?? null
     });
+    const warnings = result4.detached || result4.spawnFailed ? [] : detectExecShellSynchronousWarnings(command, {
+      resolvedShell: shellPlan.resolvedShell
+    });
     return {
-      content: result4.content,
+      content: warnings.length > 0 ? [result4.content, ...warnings.map((warning) => warning.message)].join("\n\n") : result4.content,
       metadata: {
         command,
         exitCode: result4.exitCode,
@@ -17554,8 +17779,21 @@ var execShellCapability = {
           // Phase 0: stable taskId from the pre-registered Execution
           // Envelope (additive; existing detached fields untouched).
           taskId: result4.taskId,
-          status: "running"
-        } : {},
+          status: "running",
+          // P0 machine-readable execution state: an explicit positive
+          // signal instead of requiring the model to infer "not detached"
+          // from absence. Mirrors the real lifecycle contract.
+          executionState: "detached",
+          trackedBackgroundTask: true,
+          completionNotification: "terminal-resume"
+        } : {
+          // P0 machine-readable execution state: the command already
+          // finished inside the synchronous window; no background task
+          // exists, so no completion notification will ever arrive.
+          executionState: "synchronous-complete",
+          trackedBackgroundTask: false,
+          completionNotification: "none"
+        },
         ...normalized.activity ? { activity: normalized.activity } : {}
       }
     };
@@ -17573,7 +17811,6 @@ var WORKSPACE_TOOL_NAMES = [
   "launchProcess",
   "listProcesses",
   "taskWait",
-  "taskLogs",
   "taskStop",
   "openDesktopPreview"
 ];
@@ -17582,7 +17819,6 @@ var SHELL_TOOL_NAMES = [
   "launchProcess",
   "listProcesses",
   "taskWait",
-  "taskLogs",
   "taskStop"
 ];
 var WORKSPACE_TOOL_NAME_SET = new Set(WORKSPACE_TOOL_NAMES);
@@ -17773,7 +18009,7 @@ function buildLaunchProcessTool() {
     type: "function",
     function: {
       name: "launchProcess",
-      description: "Start a long-running background process (dev server, watcher, REPL) and return immediately with {pid, label, status}. Use listProcesses to inspect or stop it.",
+      description: "Start a long-running ambient background process (dev server, watcher, REPL) and return immediately with {pid, label, taskId, status}. Real boundaries: this registers a tracked background task, but completion does NOT automatically start a new turn \u2014 the process is intentionally notice-only (an exited dev server must not silently burn a model turn). When it reaches a terminal state the bounded result (exitCode, duration, stdout/stderr tail) is recorded and surfaced as a notice injected only on your next real turn in the same conversation. Use listProcesses to inspect, taskWait to block for its terminal state, or taskStop to stop it. For a finite job (tests, builds, batch) whose result must resume the conversation automatically, use execShell with background: true instead.",
       parameters: {
         type: "object",
         properties: {
@@ -17832,7 +18068,7 @@ function buildTaskWaitTool() {
     type: "function",
     function: {
       name: "taskWait",
-      description: 'Block until a background task (from launchProcess, or an execShell command that detached) reaches a terminal state, or until timeoutMs elapses. Returns {outcome, status, exitCode?, cursor, events}: outcome "terminal" with status exited|failed|stopped when it finished, outcome "timeout" with status "running" when it outlived the whole budget, outcome "not-found" for an unknown taskId, or outcome "evicted" when the event trail aged out (never wait again in that case). One call already waits the maximum budget and returns the moment the task ends, so a "timeout" means the task is genuinely longer than that \u2014 go do other work and come back, rather than re-waiting in a loop (each re-wait costs a full model round-trip). For a cheap liveness peek use taskLogs (non-blocking) or pass a small timeoutMs. `cursor` is the highest event seq covered by this response \u2014 pass it to taskLogs to read only newer events.',
+      description: 'Block until a background task (from launchProcess, or an execShell command that detached) reaches a terminal state, or until timeoutMs elapses. Returns {outcome, status, exitCode?, cursor, events}: outcome "terminal" with status exited|failed|stopped when it finished, outcome "timeout" with status "running" when it outlived the whole budget, outcome "not-found" for an unknown taskId, or outcome "evicted" when the event trail aged out (never wait again in that case). One call already waits the maximum budget and returns the moment the task ends, so a "timeout" means the task is genuinely longer than that \u2014 go do other work and come back, rather than re-waiting in a loop (each re-wait costs a full model round-trip). Pass a small timeoutMs for a cheap liveness peek instead of the full result. `cursor` is the highest event seq covered by this response.',
       parameters: {
         type: "object",
         properties: {
@@ -17851,30 +18087,6 @@ function buildTaskWaitTool() {
     }
   };
 }
-function buildTaskLogsTool() {
-  return {
-    type: "function",
-    function: {
-      name: "taskLogs",
-      description: "Read a background task's lifecycle events incrementally. Returns {outcome, status, cursor, events} where events are the started|promoted|exited|killed records with seq greater than the cursor you passed, and the returned `cursor` is the new high-water mark to pass next time (omit cursor to read from the beginning; repeating the same cursor is idempotent). Oversized output is spilled to a file and reported as `logRef`, which you can open with readFile.",
-      parameters: {
-        type: "object",
-        properties: {
-          taskId: {
-            type: "string",
-            minLength: 1,
-            description: "Task id returned by launchProcess or by a detached execShell result."
-          },
-          cursor: {
-            type: "number",
-            description: "Last event seq you already consumed; only events with a higher seq are returned. Defaults to 0 (all retained events)."
-          }
-        },
-        required: ["taskId"]
-      }
-    }
-  };
-}
 function buildTaskStopTool() {
   return {
     type: "function",
@@ -17914,7 +18126,6 @@ function buildWorkspaceToolDefinition(toolName) {
   if (toolName === "openDesktopPreview") return buildOpenDesktopPreviewTool();
   if (toolName === "listProcesses") return buildListProcessesTool();
   if (toolName === "taskWait") return buildTaskWaitTool();
-  if (toolName === "taskLogs") return buildTaskLogsTool();
   if (toolName === "taskStop") return buildTaskStopTool();
   return null;
 }
@@ -18939,6 +19150,55 @@ async function execShellTool(args2) {
     }
   );
 }
+var LAUNCH_PROCESS_STREAM_RING_CHARS = 65536;
+var LAUNCH_PROCESS_STREAM_CAPTURE_MAX_CHARS = 4e6;
+function createLaunchProcessStreamCapture() {
+  let ring = "";
+  let full = null;
+  let capturedChars = 0;
+  let totalChars = 0;
+  let totalNewlines = 0;
+  return {
+    push(chunk) {
+      const str = typeof chunk === "string" ? chunk : chunk.toString("utf8");
+      if (!str) return;
+      totalChars += str.length;
+      for (let i = 0; i < str.length; i += 1) {
+        if (str.charCodeAt(i) === 10) totalNewlines += 1;
+      }
+      const combined = ring + str;
+      if (combined.length <= LAUNCH_PROCESS_STREAM_RING_CHARS) {
+        ring = combined;
+        return;
+      }
+      if (full === null) {
+        full = [combined];
+        capturedChars = combined.length;
+      } else if (capturedChars < LAUNCH_PROCESS_STREAM_CAPTURE_MAX_CHARS) {
+        const room = LAUNCH_PROCESS_STREAM_CAPTURE_MAX_CHARS - capturedChars;
+        const slice = str.length <= room ? str : str.slice(0, room);
+        full.push(slice);
+        capturedChars += slice.length;
+      }
+      ring = combined.slice(-LAUNCH_PROCESS_STREAM_RING_CHARS);
+    },
+    text() {
+      return full === null ? ring : full.join("");
+    },
+    tailText() {
+      return ring;
+    },
+    evicted() {
+      return full !== null;
+    },
+    totalChars() {
+      return totalChars;
+    },
+    totalLines() {
+      return totalChars > 0 ? totalNewlines + 1 : 0;
+    }
+  };
+}
 async function launchProcessTool(args2) {
   const parsed = parseWorkspaceToolArguments(args2.call.arguments);
   const command = requireShellCommand(parsed, args2.call.name);
@@ -18966,6 +19226,14 @@ async function launchProcessTool(args2) {
     stdio: ["ignore", "pipe", "pipe"],
     detached
   });
+  const stdoutCapture = createLaunchProcessStreamCapture();
+  const stderrCapture = createLaunchProcessStreamCapture();
+  proc.stdout?.on("data", (chunk) => stdoutCapture.push(chunk));
+  proc.stderr?.on("data", (chunk) => stderrCapture.push(chunk));
+  proc.stdout?.on("error", () => {
+  });
+  proc.stderr?.on("error", () => {
+  });
   const pid = proc.pid;
   if (typeof pid !== "number") {
     return {
@@ -19006,7 +19274,38 @@ async function launchProcessTool(args2) {
       process.removeListener("SIGTERM", cleanupChildOnHostSignal);
       process.removeListener("SIGINT", cleanupChildOnHostSignal);
     }
-    registry2.markExited(pid, code ?? 1);
+    const exitCode = code ?? 1;
+    let capsule;
+    try {
+      capsule = buildProcessTaskResultCapsule({
+        // The full captured output (bounded prefix when the process was
+        // extremely chatty): the module tails it for the inline capsule and
+        // spills it for recovery. Provenance carries the live original-stream
+        // counters so truncated/spill metadata never derives from the ring.
+        stdout: stdoutCapture.text(),
+        stderr: stderrCapture.text(),
+        stdoutTail: stdoutCapture.tailText(),
+        stderrTail: stderrCapture.tailText(),
+        exitCode,
+        // Duration measured from the registry envelope's startedAt (spawn).
+        startedAt: envelope.startedAt,
+        workspaceRoot: args2.workspaceRoot,
+        streamProvenance: {
+          stdout: {
+            evicted: stdoutCapture.evicted(),
+            totalChars: stdoutCapture.totalChars(),
+            totalLines: stdoutCapture.totalLines()
+          },
+          stderr: {
+            evicted: stderrCapture.evicted(),
+            totalChars: stderrCapture.totalChars(),
+            totalLines: stderrCapture.totalLines()
+          }
+        }
+      });
+    } catch {
+    }
+    registry2.markExited(pid, exitCode, capsule);
   });
   const activity = extractActivity(parsed);
   const resultData = { pid, label, taskId: envelope.taskId, status: "running" };
@@ -19018,6 +19317,13 @@ async function launchProcessTool(args2) {
       label,
       status: "running",
       taskId: envelope.taskId,
+      // P0 machine-readable execution state (consistent with the real wake
+      // contract): a real background task from birth, but ambient — its
+      // terminal result rides the next real turn's notice, not an automatic
+      // completion turn.
+      executionState: "background",
+      trackedBackgroundTask: true,
+      completionNotification: "next-turn-notice",
       processLaunch: resultData,
       ...activity ? { activity } : {}
     }
@@ -19242,11 +19548,295 @@ function createLocalWorkspaceToolExecutors(args2) {
   };
 }
 
-// packages/cli/client/localDialogRecords.ts
-var localDialogMessageRecordToRuntimeMessage = dialogMessageRecordToAgentRuntimeMessage;
-function buildLocalDialogWritePlan(args2) {
-  return buildAgentRuntimeDialogWritePlan({
-    input: args2.input,
+// packages/agent-runtime/toolArgumentGate.ts
+var FIELD_ALIAS_GROUPS = [
+  // localWorkspaceTools.ts:336 导出常量（readFile/writeFile/editFile/globFiles）
+  PATH_FIELD_ALIASES,
+  // localWorkspaceTools.ts:339-340 导出常量（editFile）
+  OLD_TEXT_FIELD_ALIASES,
+  NEW_TEXT_FIELD_ALIASES,
+  // localWorkspaceTools.ts:733 `args.cmd || args.command`（launchProcess）；
+  // launchProcess 的 required ["command"] 见 localWorkspaceToolDefs.ts:283。
+  // 注：execShell 的 schema 无 required（command 在 executor 层强制，
+  // capabilities/execShellCapability.ts:42 声明 cmd 兼容字段），本组对它不产生拦截。
+  ["command", "cmd"],
+  // localWorkspaceTools.ts:698-699 `args.pattern ?? args.glob`（globFiles）
+  ["pattern", "glob"],
+  // noloWorkspaceTools.ts:492 `args.dialog ?? args.dialogId ?? args.id`（readDialog）
+  ["dialog", "dialogId", "id"],
+  // noloWorkspaceTools.ts:545 `args.agent ?? args.agentKey ?? args.id`（readAgent）
+  ["agent", "agentKey", "id"],
+  // noloWorkspaceTools.ts:552 `args.space ?? args.spaceId ?? args.id`（readSpace）
+  ["space", "spaceId", "id"],
+  // noloWorkspaceTools.ts:561/567 `args.doc ?? args.docKey ?? args.pageKey ?? args.key`
+  // （readDoc / readSkillDoc）
+  ["doc", "docKey", "pageKey", "key"],
+  // noloWorkspaceTools.node.ts:238 `parsed.name ?? parsed.skillName ?? parsed.skill`（loadSkill）
+  ["name", "skillName", "skill"],
+  // noloWorkspaceTools.ts:593 `args.table ?? args.tableId ?? args.metaKey`（queryTableRows）
+  ["table", "tableId", "metaKey"]
+];
+var TYPE_MATCHERS = {
+  string: (value) => typeof value === "string",
+  // 数字字符串视为可接受：executor 普遍 Number()/clamp 宽松处理，拦截会误报。
+  number: (value) => typeof value === "number" || typeof value === "string" && value.trim() !== "" && Number.isFinite(Number(value)),
+  integer: (value) => typeof value === "number" || typeof value === "string" && value.trim() !== "" && Number.isFinite(Number(value)),
+  boolean: (value) => typeof value === "boolean" || value === "true" || value === "false",
+  object: (value) => typeof value === "object" && value !== null && !Array.isArray(value),
+  array: (value) => Array.isArray(value)
+};
+function describeValueType(value) {
+  if (value === null) return "null";
+  if (Array.isArray(value)) return "array";
+  return typeof value;
+}
+function isAliasSatisfied(args2, field) {
+  for (const group of FIELD_ALIAS_GROUPS) {
+    if (!group.includes(field)) continue;
+    if (group.some((alias) => args2[alias] !== void 0)) return true;
+  }
+  return false;
+}
+function readRequiredFields(parameters) {
+  const required = parameters.required;
+  if (!Array.isArray(required)) return [];
+  return required.filter((field) => typeof field === "string");
+}
+function readProperties(parameters) {
+  const properties = parameters.properties;
+  if (!properties || typeof properties !== "object" || Array.isArray(properties)) {
+    return {};
+  }
+  return properties;
+}
+function validateToolArguments(args2) {
+  const { toolName, rawArguments, parameters } = args2;
+  if (!parameters || typeof parameters !== "object" || Array.isArray(parameters)) {
+    return { ok: true, args: {} };
+  }
+  const schema = parameters;
+  const requiredFields = readRequiredFields(schema);
+  const properties = readProperties(schema);
+  if (requiredFields.length === 0 && Object.keys(properties).length === 0) {
+    return { ok: true, args: {} };
+  }
+  const raw = typeof rawArguments === "string" ? rawArguments.trim() : "";
+  let record = {};
+  if (raw !== "") {
+    let parsed;
+    try {
+      parsed = JSON.parse(raw);
+    } catch {
+      return { ok: true, args: {} };
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+      return { ok: true, args: {} };
+    }
+    record = parsed;
+  }
+  for (const field of requiredFields) {
+    if (record[field] !== void 0) continue;
+    if (isAliasSatisfied(record, field)) continue;
+    return {
+      ok: false,
+      message: `${toolName} \u53C2\u6570\u6821\u9A8C\u5931\u8D25\uFF1A\u7F3A\u5C11\u5FC5\u586B\u53C2\u6570 "${field}"\u3002\u8BF7\u8865\u4E0A\u540E\u91CD\u65B0\u8C03\u7528 ${toolName}\u3002`
+    };
+  }
+  for (const [field, spec] of Object.entries(properties)) {
+    const value = record[field];
+    if (value === void 0 || value === null) continue;
+    if (!spec || typeof spec !== "object" || Array.isArray(spec)) continue;
+    const declared = spec.type;
+    if (typeof declared !== "string") continue;
+    const matcher = TYPE_MATCHERS[declared];
+    if (!matcher) continue;
+    if (!matcher(value)) {
+      return {
+        ok: false,
+        message: `${toolName} \u53C2\u6570\u6821\u9A8C\u5931\u8D25\uFF1A\u53C2\u6570 "${field}" \u5E94\u4E3A ${declared}\uFF0C\u5B9E\u9645\u6536\u5230 ${describeValueType(value)}\u3002\u8BF7\u4FEE\u6B63\u540E\u91CD\u65B0\u8C03\u7528 ${toolName}\u3002`
+      };
+    }
+  }
+  return { ok: true, args: record };
+}
+function buildToolParametersIndex(tools) {
+  const index = /* @__PURE__ */ new Map();
+  for (const tool of tools) {
+    if (!tool || typeof tool !== "object") continue;
+    const fn3 = tool.function;
+    if (!fn3 || typeof fn3 !== "object") continue;
+    const name = fn3.name;
+    const parameters = fn3.parameters;
+    if (typeof name === "string" && name && parameters !== void 0) {
+      index.set(name, parameters);
+    }
+  }
+  return index;
+}
+var cachedAgentRuntimeIndex = null;
+function getAgentRuntimeToolParametersIndex() {
+  if (cachedAgentRuntimeIndex) return cachedAgentRuntimeIndex;
+  const index = /* @__PURE__ */ new Map();
+  try {
+    const workspaceTools = buildLocalWorkspaceOpenAiTools({
+      toolNames: [...WORKSPACE_TOOL_NAMES],
+      exposeShellTools: true
+    });
+    for (const [name, parameters] of buildToolParametersIndex(workspaceTools)) {
+      index.set(name, parameters);
+    }
+    const noloTools = buildNoloWorkspaceOpenAiTools({
+      toolNames: [...NOLO_WORKSPACE_TOOL_NAMES]
+    });
+    for (const [name, parameters] of buildToolParametersIndex(noloTools)) {
+      index.set(name, parameters);
+    }
+  } catch {
+  }
+  cachedAgentRuntimeIndex = index;
+  return index;
+}
+
+// packages/agent-runtime/localToolPolicy.ts
+var NEVER_LOCAL_TOOLS = /* @__PURE__ */ new Set([
+  "deleteSpaces",
+  "updateAgent",
+  "updateSelf",
+  "createAgent"
+]);
+var DEFAULT_LOCAL_TOOLS = /* @__PURE__ */ new Set([
+  "readFile",
+  "writeFile",
+  "editFile",
+  "globFiles",
+  "execShell",
+  "launchProcess",
+  "listProcesses",
+  // ProcessTask follow-up tools. Same tier as listProcesses: they observe/stop
+  // tasks the agent itself already spawned, so their blast radius is strictly
+  // narrower than launchProcess (which is default-enabled). Model-facing
+  // follow-ups are taskWait/taskStop only — lifecycle history (taskLogs) stays
+  // runtime-internal.
+  "taskWait",
+  "taskStop",
+  // Scheduling tools: forking/observing sub-agents is a declared capability
+  // of capable agents, and the blast radius is strictly narrower than
+  // execShell (already default-enabled). Requiring an env allowlist for these
+  // while execShell is open by default inverted the risk model and forced every
+  // new local user to hand-edit .env files before sub-agent tasks worked.
+  "startAgentRun",
+  "controlAgentRun"
+]);
+function parseToolAllowlist(value) {
+  return (value ?? "").split(",").flatMap((item) => {
+    const trimmed = item.trim();
+    return trimmed ? [trimmed] : [];
+  });
+}
+function normalizeLocalToolName(toolName) {
+  return canonicalizeToolName(
+    String(toolName ?? "").replace(/^functions\./, "").trim()
+  );
+}
+function isRestrictedLocalToolMode(env) {
+  return env.NOLO_LOCAL_TOOL_MODE === "restricted";
+}
+function resolveLocalToolPolicy(args2) {
+  const toolName = normalizeLocalToolName(args2.toolName);
+  const restrictedMode = isRestrictedLocalToolMode(args2.env);
+  if (!toolName) {
+    return {
+      allowed: false,
+      toolName,
+      reason: "Tool name is required."
+    };
+  }
+  if (NEVER_LOCAL_TOOLS.has(toolName)) {
+    return {
+      allowed: false,
+      toolName,
+      reason: `${toolName} is blocked by the local runtime safety policy.`
+    };
+  }
+  const allowedByEnv = new Set(parseToolAllowlist(args2.env.NOLO_LOCAL_ALLOWED_TOOLS));
+  const agentTools = new Set(
+    (args2.agentToolNames ?? []).flatMap((item) => {
+      const normalized = normalizeLocalToolName(item);
+      return normalized ? [normalized] : [];
+    })
+  );
+  if (!restrictedMode && agentTools.has(toolName)) {
+    return { allowed: true, toolName };
+  }
+  if (DEFAULT_LOCAL_TOOLS.has(toolName) && agentTools.has(toolName)) {
+    return { allowed: true, toolName };
+  }
+  if (allowedByEnv.has(toolName) && agentTools.has(toolName)) {
+    return { allowed: true, toolName };
+  }
+  return {
+    allowed: false,
+    toolName,
+    reason: `${toolName} is not enabled for local runtime runs. The agent must declare the tool in its manifest; in restricted mode (NOLO_LOCAL_TOOL_MODE=restricted) non-default tools also require adding to NOLO_LOCAL_ALLOWED_TOOLS (e.g. NOLO_LOCAL_ALLOWED_TOOLS=someCustomTool) and restarting the session so the env var loads.`
+  };
+}
+async function executeLocalToolWithPolicy(args2) {
+  if (args2.runToolNames !== void 0 && !args2.runToolNames.includes(normalizeLocalToolName(args2.call.name))) {
+    throw new Error(`${args2.call.name} is outside the final run tool surface.`);
+  }
+  const decision = resolveLocalToolPolicy({
+    env: args2.env,
+    agentToolNames: args2.agentToolNames,
+    toolName: args2.call.name
+  });
+  if (!decision.allowed) throw new Error(decision.reason);
+  const executor = args2.executors?.[decision.toolName];
+  if (!executor) {
+    throw new Error(`${decision.toolName} is allowed by policy but no local executor is registered.`);
+  }
+  const parametersSchema = args2.toolParametersIndex?.get(decision.toolName);
+  if (parametersSchema !== void 0) {
+    const gate = validateToolArguments({
+      toolName: decision.toolName,
+      rawArguments: args2.call.arguments,
+      parameters: parametersSchema
+    });
+    if (!gate.ok) throw new Error(gate.message);
+  }
+  const opts = {
+    ...args2.abortSignal ? { abortSignal: args2.abortSignal } : {},
+    ...args2.detachMs !== void 0 ? { detachMs: args2.detachMs } : {},
+    ...args2.confirmed !== void 0 ? { confirmed: args2.confirmed } : {},
+    ...args2.enableDestructiveShellGuard !== void 0 ? { enableDestructiveShellGuard: args2.enableDestructiveShellGuard } : {},
+    ...args2.confirmDestructiveAction ? { confirmDestructiveAction: args2.confirmDestructiveAction } : {},
+    ...args2.blockDestructiveWithoutConfirmation !== void 0 ? { blockDestructiveWithoutConfirmation: args2.blockDestructiveWithoutConfirmation } : {}
+  };
+  if (decision.toolName === "execShell") {
+    let parsedInput = args2.call.arguments;
+    if (typeof parsedInput === "string") {
+      try {
+        parsedInput = JSON.parse(parsedInput);
+      } catch {
+        parsedInput = { command: parsedInput };
+      }
+    }
+    await evaluateExecShellDestructiveGuard(parsedInput, opts);
+    opts.confirmed = true;
+  }
+  return executor(
+    {
+      ...args2.call,
+      name: decision.toolName
+    },
+    opts
+  );
+}
+
+// packages/cli/client/localDialogRecords.ts
+var localDialogMessageRecordToRuntimeMessage = dialogMessageRecordToAgentRuntimeMessage;
+function buildLocalDialogWritePlan(args2) {
+  return buildAgentRuntimeDialogWritePlan({
+    input: args2.input,
     userId: args2.userId,
     now: args2.now,
     createId: args2.createId,
@@ -19381,15 +19971,23 @@ function buildLoadSkillExecutor(args2) {
     const { resolveSkillByName } = await import("./skillDiscovery-CYUCJMAG.js");
     const resolved = resolveSkillByName(args2.cwd, name);
     if (!resolved) {
-      const { resolveCodingBuiltinSlug, buildCodingSkillContentBySlug } = await import("./codingSkills-7S6523WH.js");
-      const builtinSlug = resolveCodingBuiltinSlug(name);
-      if (builtinSlug) {
-        const body = buildCodingSkillContentBySlug(builtinSlug);
+      const { resolveBuiltinSkillByName } = await import("./builtinSkillRegistry-Q2VVY3SC.js");
+      const builtin = resolveBuiltinSkillByName(name);
+      if (builtin) {
         return {
           content: `Skill "${name}" loaded inline. Follow its instructions.
 
-${body}`,
-          metadata: { loadSkill: true, resolved: true, name, requestedName: name, builtin: true }
+${builtin.content}`,
+          // toolNames 进 metadata：回退面已扩到全注册表，其中授工具型 skill
+          // （search-* 等）的工具在本宿主未必接线，宿主可据此降级提示。
+          metadata: {
+            loadSkill: true,
+            resolved: true,
+            name,
+            requestedName: name,
+            builtin: true,
+            ...builtin.config.toolNames?.length ? { toolNames: [...builtin.config.toolNames] } : {}
+          }
         };
       }
       return {
@@ -19431,737 +20029,8 @@ No skills were discovered in this workspace.`;
 Available skills: ${available.join(", ")}`;
 }
 
-// packages/core/chat/upstreamErrorBody.ts
-function parseUpstreamErrorBody(errorText, statusText) {
-  if (errorText) {
-    try {
-      const parsed = JSON.parse(errorText);
-      if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
-        const error = parsed.error;
-        if (error && typeof error === "object" && !Array.isArray(error)) {
-          return parsed;
-        }
-      }
-    } catch {
-    }
-  }
-  return { error: { message: errorText || statusText } };
-}
-
-// packages/agent-runtime/antigravityCloudCodeProvider.ts
-import { randomUUID } from "node:crypto";
-
-// packages/agent-runtime/antigravityWireModel.ts
-var WIRE_PROFILES = {
-  // Antigravity discovery exposes 3.7 Flash as one tiered wire model.
-  // The UI labels its effort variants (Low/Medium/High), but the literal
-  // -medium/-high ids return 404 from streamGenerateContent.
-  "gemini-3.7-flash-tiered": { modelEnum: "MODEL_PLACEHOLDER_M301", maxOutputTokens: 65536 },
-  // Gemini 3.8 Flash 沿用 3.7 的 tiered 兼容策略：仓库内暂无 Antigravity discovery
-  // 证据确认 3.8 的 wire modelEnum，禁止虚构，先只声明同档输出上限；enum 待
-  // discovery 证据到位后补齐。
-  "gemini-3.8-flash-tiered": { maxOutputTokens: 65536 },
-  "gemini-3.6-flash-low": { maxOutputTokens: 65536 },
-  "gemini-3.6-flash-medium": { maxOutputTokens: 65536 },
-  "gemini-3.6-flash-high": { maxOutputTokens: 65536 },
-  // 旧模型 wire 映射保留：存量自定义 agent 仍可能引用（注册表已下线不影响此处）。
-  "gemini-3.5-flash-extra-low": { modelEnum: "MODEL_PLACEHOLDER_M187", maxOutputTokens: 65536 },
-  "gemini-3.5-flash-low": { modelEnum: "MODEL_PLACEHOLDER_M20", maxOutputTokens: 65536 },
-  "gemini-3-flash-agent": { modelEnum: "MODEL_PLACEHOLDER_M132", maxOutputTokens: 65536 },
-  "gemini-3.1-pro-low": { modelEnum: "MODEL_PLACEHOLDER_M36", maxOutputTokens: 65535 },
-  "gemini-pro-agent": { modelEnum: "MODEL_PLACEHOLDER_M16", maxOutputTokens: 65535 },
-  "claude-sonnet-5": { maxOutputTokens: 64e3 },
-  "claude-sonnet-4-6": { maxOutputTokens: 64e3 },
-  "claude-opus-4-6-thinking": { maxOutputTokens: 64e3 },
-  "gemini-2.5-flash": { maxOutputTokens: 65536 },
-  "gemini-2.5-pro": { maxOutputTokens: 65536 }
-};
-function resolveAntigravityWireModel(logicalModelId) {
-  const id = logicalModelId.trim();
-  const lower = id.toLowerCase();
-  if (lower === "gemini-3.5-flash") {
-    const wireModelId = "gemini-3.5-flash-low";
-    return { wireModelId, profile: WIRE_PROFILES[wireModelId] };
-  }
-  if (lower === "gemini-3.7-flash" || ["gemini-3.7-flash-low", "gemini-3.7-flash-medium", "gemini-3.7-flash-high"].includes(lower)) {
-    const wireModelId = "gemini-3.7-flash-tiered";
-    return { wireModelId, profile: WIRE_PROFILES[wireModelId] };
-  }
-  if (lower === "gemini-3.8-flash" || ["gemini-3.8-flash-low", "gemini-3.8-flash-medium", "gemini-3.8-flash-high"].includes(lower)) {
-    const wireModelId = "gemini-3.8-flash-tiered";
-    return { wireModelId, profile: WIRE_PROFILES[wireModelId] };
-  }
-  if (lower === "gemini-3.6-flash") {
-    const wireModelId = "gemini-3.6-flash-low";
-    return { wireModelId, profile: WIRE_PROFILES[wireModelId] };
-  }
-  if (lower === "gemini-3.1-pro" || lower === "gemini-3.1-pro-preview") {
-    const wireModelId = "gemini-3.1-pro-low";
-    return { wireModelId, profile: WIRE_PROFILES[wireModelId] };
-  }
-  if (WIRE_PROFILES[id]) {
-    return { wireModelId: id, profile: WIRE_PROFILES[id] };
-  }
-  return { wireModelId: id };
-}
-
-// packages/agent-runtime/geminiNativeShared.ts
-var SKIP_THOUGHT_SIGNATURE = "skip_thought_signature_validator";
-function resolveGeminiModelQuirks(modelId) {
-  const lower = modelId.toLowerCase();
-  const isGemini3 = lower.includes("gemini-3");
-  const isStrictSignatureModel = lower.includes("gemini-3.5") || lower.includes("flash-preview");
-  const isClaude = lower.includes("claude");
-  return {
-    requiresThoughtSignature: isGemini3,
-    allowsThoughtSignatureSentinel: isGemini3 && !isStrictSignatureModel,
-    isClaudeCrossModel: isClaude
-  };
-}
-function isGemini3Model(modelId) {
-  return resolveGeminiModelQuirks(modelId).requiresThoughtSignature;
-}
-function messageText(content) {
-  if (typeof content === "string") return content;
-  if (!Array.isArray(content)) return "";
-  return content.filter(
-    (part) => part?.type === "text"
-  ).map((part) => part.text).join("\n").trim();
-}
-function parseDataUrlToInlineData(url) {
-  const match7 = /^data:([A-Za-z0-9.+-]+\/[A-Za-z0-9.+-]+);base64,([A-Za-z0-9+/=]*)$/.exec(
-    url
-  );
-  if (!match7) return null;
-  return { mimeType: match7[1], data: match7[2] };
-}
-function extractInlineDataParts(content) {
-  if (!Array.isArray(content)) return [];
-  const parts2 = [];
-  for (const part of content) {
-    if (!part || typeof part !== "object") continue;
-    if (part.type !== "image_url") continue;
-    const url = part.image_url?.url;
-    if (typeof url !== "string" || !url.trim()) continue;
-    const inline = parseDataUrlToInlineData(url);
-    if (inline) parts2.push({ inlineData: inline });
-  }
-  return parts2;
-}
-function convertOpenAiMessagesToGemini(messages, options) {
-  const contents = [];
-  const systemTexts = [];
-  let toolCallIndex = 0;
-  let pendingFunctionCalls = [];
-  const pushOrMergeContent = (role, parts2) => {
-    if (parts2.length === 0) return;
-    const last = contents[contents.length - 1];
-    if (last && last.role === role) {
-      last.parts.push(...parts2);
-    } else {
-      contents.push({ role, parts: parts2 });
-    }
-  };
-  const flushPendingFunctionCalls = () => {
-    if (pendingFunctionCalls.length === 0) return;
-    const dummyResponses = pendingFunctionCalls.map(
-      ({ name, id }) => ({
-        functionResponse: {
-          name,
-          response: { output: "{}" },
-          ...id ? { id } : {}
-        }
-      })
-    );
-    pendingFunctionCalls = [];
-    pushOrMergeContent("user", dummyResponses);
-  };
-  for (const raw of messages) {
-    if (!raw || typeof raw !== "object" || !("role" in raw)) continue;
-    const role = String(raw.role);
-    const content = "content" in raw ? raw.content : null;
-    if (role === "system") {
-      const text = messageText(
-        content
-      );
-      if (text) systemTexts.push(text);
-      continue;
-    }
-    if (role === "user") {
-      flushPendingFunctionCalls();
-      const text = messageText(
-        content
-      );
-      const imageParts = extractInlineDataParts(
-        content
-      );
-      if (!text && imageParts.length === 0) continue;
-      const parts2 = [];
-      if (text) parts2.push({ text });
-      for (const img of imageParts) parts2.push(img);
-      pushOrMergeContent("user", parts2);
-      continue;
-    }
-    if (role === "assistant") {
-      flushPendingFunctionCalls();
-      const text = messageText(
-        content
-      );
-      const toolCalls = "tool_calls" in raw && Array.isArray(raw.tool_calls) ? raw.tool_calls ?? [] : [];
-      const parts2 = [];
-      if (text) {
-        parts2.push({ text });
-      }
-      for (const call of toolCalls) {
-        const name = call?.function?.name?.trim();
-        if (!name) continue;
-        const id = call.id?.trim() || `${name}_${toolCallIndex++}`;
-        pendingFunctionCalls.push({ name, id });
-        const realSignature = typeof call.thought_signature === "string" && call.thought_signature ? call.thought_signature : void 0;
-        const isFirstFunctionCallPart = !parts2.some(
-          (p) => "functionCall" in p
-        );
-        const signature = realSignature ?? (options.attachSkipThoughtSignature && isFirstFunctionCallPart ? SKIP_THOUGHT_SIGNATURE : void 0);
-        const part = {
-          functionCall: {
-            name,
-            args: parseToolArgs(call.function?.arguments),
-            ...id ? { id } : {}
-          },
-          ...signature ? { thoughtSignature: signature } : {}
-        };
-        parts2.push(part);
-      }
-      pushOrMergeContent("model", parts2);
-      continue;
-    }
-    if (role === "tool") {
-      const toolCallId = "tool_call_id" in raw && typeof raw.tool_call_id === "string" ? raw.tool_call_id : "";
-      const rawName = "name" in raw && typeof raw.name === "string" ? raw.name.trim() : "";
-      const pendingIndex = pendingFunctionCalls.findIndex(
-        (p) => toolCallId ? p.id === toolCallId : rawName ? p.name === rawName : true
-      );
-      if (pendingIndex === -1) continue;
-      const [{ name, id }] = pendingFunctionCalls.splice(pendingIndex, 1);
-      const output = messageText(content) || "{}";
-      pushOrMergeContent("user", [
-        {
-          functionResponse: {
-            name,
-            response: { output },
-            // 保留 OpenAI tool_call_id：antigravity Cloud Code Assist 网关把
-            // Gemini contents 转成 Claude messages 时需要 functionResponse →
-            // tool_result 的 tool_use_id；缺 id 时网关报
-            // "tool_result.tool_use_id: Field required"（HTTP 400）。
-            ...id ? { id } : {}
-          }
-        }
-      ]);
-    }
-  }
-  flushPendingFunctionCalls();
-  if (contents.length > 0 && contents[0]?.role === "model") {
-    contents.unshift({
-      role: "user",
-      parts: [{ text: "Continue the conversation." }]
-    });
-  }
-  return { contents, systemTexts };
-}
-function parseToolArgs(raw) {
-  if (typeof raw === "string") {
-    try {
-      const parsed = JSON.parse(raw);
-      if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
-        return parsed;
-      }
-    } catch {
-    }
-  }
-  if (raw && typeof raw === "object" && !Array.isArray(raw)) {
-    return raw;
-  }
-  return {};
-}
-function sanitizeGeminiSchemaNode(node, active) {
-  const out = {};
-  if (!node || typeof node !== "object" || Array.isArray(node)) {
-    return { type: "string" };
-  }
-  if (active?.has(node)) {
-    return { type: "object", description: "(circular schema reference)" };
-  }
-  const seen = active ?? /* @__PURE__ */ new WeakSet();
-  seen.add(node);
-  try {
-    return sanitizeGeminiSchemaNodeInner(node, out, seen);
-  } finally {
-    seen.delete(node);
-  }
-}
-function sanitizeGeminiSchemaNodeInner(src, out, seen) {
-  if (Array.isArray(src.type)) {
-    const firstNonNull = src.type.find((t) => t !== "null");
-    if (typeof firstNonNull === "string") out.type = firstNonNull;
-    out.nullable = true;
-  } else if (typeof src.type === "string") {
-    out.type = src.type;
-  }
-  if (typeof src.description === "string") out.description = src.description;
-  if (typeof src.minimum === "number") out.minimum = src.minimum;
-  if (typeof src.maximum === "number") out.maximum = src.maximum;
-  if (Array.isArray(src.enum) && src.enum.length > 0) out.enum = src.enum;
-  if (src.nullable === true) out.nullable = true;
-  if ("const" in src && src.const !== void 0 && !out.enum) {
-    out.enum = [src.const];
-  }
-  const variantBranches = [
-    ...Array.isArray(src.oneOf) ? src.oneOf : [],
-    ...Array.isArray(src.anyOf) ? src.anyOf : []
-  ];
-  if (variantBranches.length > 0) {
-    const mergedProperties = {};
-    let requiredIntersection;
-    for (const branch of variantBranches) {
-      const sanitized = sanitizeGeminiSchemaNode(branch, seen);
-      const branchProperties = sanitized.properties ?? {};
-      for (const [key, value] of Object.entries(branchProperties)) {
-        const previous = mergedProperties[key];
-        const prevEnum = previous?.enum;
-        const nextEnum = value?.enum;
-        if (prevEnum && nextEnum) {
-          mergedProperties[key] = {
-            ...value,
-            enum: [.../* @__PURE__ */ new Set([...prevEnum, ...nextEnum])]
-          };
-        } else {
-          mergedProperties[key] = value;
-        }
-      }
-      const branchRequired = Array.isArray(sanitized.required) ? sanitized.required : [];
-      requiredIntersection = requiredIntersection === void 0 ? [...branchRequired] : requiredIntersection.filter((r) => branchRequired.includes(r));
-    }
-    out.properties = {
-      ...out.properties ?? {},
-      ...mergedProperties
-    };
-    if (requiredIntersection !== void 0 && requiredIntersection.length > 0) {
-      out.required = requiredIntersection;
-    }
-    if (typeof out.type !== "string") out.type = "object";
-  }
-  if (Array.isArray(src.allOf)) {
-    for (const branch of src.allOf) {
-      const sanitized = sanitizeGeminiSchemaNode(branch, seen);
-      out.properties = {
-        ...out.properties ?? {},
-        ...sanitized.properties ?? {}
-      };
-      if (Array.isArray(sanitized.required)) {
-        out.required = [
-          .../* @__PURE__ */ new Set([
-            ...out.required ?? [],
-            ...sanitized.required ?? []
-          ])
-        ];
-      }
-    }
-    if (typeof out.type !== "string") out.type = "object";
-  }
-  if (src.properties && typeof src.properties === "object") {
-    const properties = {};
-    for (const [key, value] of Object.entries(
-      src.properties
-    )) {
-      properties[key] = sanitizeGeminiSchemaNode(value, seen);
-    }
-    out.properties = properties;
-    if (typeof out.type !== "string") out.type = "object";
-  }
-  if (Array.isArray(src.required)) {
-    const properties = out.properties ?? {};
-    const required = [...new Set(src.required)].filter(
-      (r) => typeof r === "string" && r in properties
-    );
-    if (required.length > 0) out.required = required;
-  }
-  if (src.items !== void 0) {
-    out.items = sanitizeGeminiSchemaNode(src.items, seen);
-    if (typeof out.type !== "string") out.type = "array";
-  }
-  if (typeof out.type !== "string") out.type = "object";
-  return out;
-}
-function convertOpenAiToolsToGemini(tools) {
-  if (!Array.isArray(tools) || tools.length === 0) return void 0;
-  const declarations = [];
-  for (const tool of tools) {
-    if (!tool || typeof tool !== "object" || !("function" in tool)) continue;
-    const fn3 = tool.function;
-    const name = typeof fn3.name === "string" ? fn3.name : "";
-    if (!name) continue;
-    declarations.push({
-      name,
-      description: typeof fn3.description === "string" ? fn3.description : "",
-      parameters: sanitizeGeminiSchemaNode(
-        fn3.parameters ?? { type: "object", properties: {} }
-      )
-    });
-  }
-  if (declarations.length === 0) return void 0;
-  return [{ functionDeclarations: declarations }];
-}
-function createGeminiAccumulatorState() {
-  return {
-    text: "",
-    toolCalls: [],
-    reasoning: "",
-    events: []
-  };
-}
-function applyGeminiChunk(chunk, state, options) {
-  if (!chunk || typeof chunk !== "object") return;
-  const response = "response" in chunk && chunk.response && typeof chunk.response === "object" ? chunk.response : chunk;
-  if ("usageMetadata" in response && response.usageMetadata && typeof response.usageMetadata === "object") {
-    const meta = response.usageMetadata;
-    const prompt = typeof meta.promptTokenCount === "number" ? meta.promptTokenCount : 0;
-    const candidates2 = typeof meta.candidatesTokenCount === "number" ? meta.candidatesTokenCount : 0;
-    const total = typeof meta.totalTokenCount === "number" ? meta.totalTokenCount : prompt + candidates2;
-    const cached3 = typeof meta.cachedContentTokenCount === "number" && Number.isFinite(meta.cachedContentTokenCount) ? (
-      // cached ⊆ prompt；对畸形上游防御性钳位，避免 cache_read > input 破坏归一化与计费
-      Math.min(Math.max(0, Math.floor(meta.cachedContentTokenCount)), prompt)
-    ) : 0;
-    state.usage = {
-      prompt_tokens: prompt,
-      completion_tokens: candidates2,
-      total_tokens: total,
-      ...cached3 > 0 ? { cache_read_input_tokens: cached3 } : {}
-    };
-    state.events.push({ kind: "usage", usage: state.usage });
-  }
-  const candidates = Array.isArray(response.candidates) ? response.candidates : [];
-  for (const candidate of candidates) {
-    if (!candidate || typeof candidate !== "object") continue;
-    const candidateFinishReason = candidate.finishReason;
-    if (typeof candidateFinishReason === "string" && candidateFinishReason.trim()) {
-      state.finishReason = candidateFinishReason.trim();
-      state.events.push({ kind: "finish", reason: state.finishReason });
-    }
-    const parts2 = Array.isArray(
-      candidate.content?.parts
-    ) ? candidate.content.parts : [];
-    for (const part of parts2) {
-      if (!part || typeof part !== "object") continue;
-      const partSignature = part.thoughtSignature;
-      const isThought = Boolean(part.thought);
-      if ("text" in part && typeof part.text === "string") {
-        const piece = part.text;
-        if (!isThought) {
-          state.text += piece;
-          if (piece) {
-            state.events.push({ kind: "text", text: piece });
-            if (options?.onTextDelta) options.onTextDelta(piece);
-          }
-        } else {
-          state.reasoning += piece;
-          if (piece) {
-            state.events.push({ kind: "reasoning", text: piece });
-            if (options?.onReasoningDelta) options.onReasoningDelta(piece);
-          }
-        }
-      }
-      if (isThought && typeof partSignature === "string" && partSignature) {
-        state.pendingThoughtSignature = partSignature;
-      }
-      if ("functionCall" in part && part.functionCall) {
-        const call = part.functionCall;
-        const name = typeof call.name === "string" ? call.name : "tool";
-        const id = typeof call.id === "string" ? call.id : `${name}_${state.toolCalls.length}`;
-        const argsObj = call.args && typeof call.args === "object" ? call.args : {};
-        const resolvedSignature = typeof partSignature === "string" && partSignature ? partSignature : state.pendingThoughtSignature;
-        state.pendingThoughtSignature = void 0;
-        const toolCall = {
-          id,
-          type: "function",
-          function: { name, arguments: JSON.stringify(argsObj) },
-          ...typeof resolvedSignature === "string" && resolvedSignature ? { thought_signature: resolvedSignature } : {}
-        };
-        state.toolCalls.push(toolCall);
-        state.events.push({ kind: "tool_call", toolCall });
-      }
-    }
-  }
-}
-function accumulateGeminiChunks(chunks2, options) {
-  const state = createGeminiAccumulatorState();
-  for (const chunk of chunks2) {
-    applyGeminiChunk(chunk, state, options);
-  }
-  return {
-    text: state.text,
-    toolCalls: state.toolCalls,
-    usage: state.usage,
-    finishReason: state.finishReason,
-    reasoningContent: state.reasoning,
-    events: state.events
-  };
-}
-async function accumulateGeminiStream(stream, options) {
-  const state = createGeminiAccumulatorState();
-  for await (const chunk of stream) {
-    applyGeminiChunk(chunk, state, options);
-  }
-  return {
-    text: state.text,
-    toolCalls: state.toolCalls,
-    usage: state.usage,
-    finishReason: state.finishReason,
-    reasoningContent: state.reasoning,
-    events: state.events
-  };
-}
-function shouldUseGeminiNativeToolRoute(provider, model, tools, isImageModel) {
-  return provider === "google" && !isImageModel(model) && isGemini3Model(model) && Array.isArray(tools) && tools.length > 0;
-}
-function buildGeminiGenerateContentRequest(args2) {
-  const { contents, systemTexts } = convertOpenAiMessagesToGemini(
-    args2.messages,
-    { attachSkipThoughtSignature: args2.attachSkipThoughtSignature }
-  );
-  const request3 = { contents };
-  if (systemTexts.length > 0) {
-    request3.systemInstruction = {
-      role: "user",
-      parts: systemTexts.map((text) => ({ text }))
-    };
-  }
-  const toolsResult = convertOpenAiToolsToGemini(args2.tools);
-  if (toolsResult) {
-    request3.tools = toolsResult;
-    request3.toolConfig = { functionCallingConfig: { mode: "VALIDATED" } };
-  }
-  const generationConfig = {};
-  if (typeof args2.maxTokens === "number" && args2.maxTokens > 0) {
-    generationConfig.maxOutputTokens = args2.maxTokens;
-  }
-  if (typeof args2.temperature === "number") {
-    generationConfig.temperature = args2.temperature;
-  }
-  if (Object.keys(generationConfig).length > 0) {
-    request3.generationConfig = generationConfig;
-  }
-  return request3;
-}
-
-// packages/agent-runtime/antigravityCloudCodeProvider.ts
-var STREAM_PATH = "/v1internal:streamGenerateContent?alt=sse";
-function buildCloudCodeAssistPayload(args2) {
-  const projectId = readAntigravityProjectId(args2.metadata);
-  if (!projectId) {
-    throw new Error(
-      "Antigravity OAuth credential is missing metadata.projectId. Re-run `nolo auth antigravity`."
-    );
-  }
-  const logicalModel = asOptionalTrimmedString(args2.openAiBody.model) ?? asOptionalTrimmedString(args2.agentConfig.model) ?? "gemini-3.1-pro";
-  const { wireModelId: model, profile } = resolveAntigravityWireModel(logicalModel);
-  const rawMessages = Array.isArray(args2.openAiBody.messages) ? args2.openAiBody.messages : [];
-  const quirks = resolveGeminiModelQuirks(model);
-  const isClaude = quirks.isClaudeCrossModel;
-  const { contents, systemTexts } = convertOpenAiMessagesToGemini(rawMessages, {
-    attachSkipThoughtSignature: quirks.allowsThoughtSignatureSentinel
-  });
-  if (contents.length === 0) {
-    throw new Error("Antigravity Cloud Code Assist request has no user/model contents.");
-  }
-  const prompt = args2.agentConfig.prompt?.trim();
-  if (prompt) systemTexts.unshift(prompt);
-  const request3 = { contents };
-  if (systemTexts.length > 0) {
-    request3.systemInstruction = {
-      role: "user",
-      parts: systemTexts.map((text) => ({ text }))
-    };
-  }
-  const tools = convertOpenAiToolsToGemini(
-    Array.isArray(args2.openAiBody.tools) ? args2.openAiBody.tools : void 0
-  );
-  if (tools) {
-    request3.tools = tools;
-    request3.toolConfig = { functionCallingConfig: { mode: "VALIDATED" } };
-  }
-  const generationConfig = {};
-  if (profile?.maxOutputTokens) {
-    generationConfig.maxOutputTokens = profile.maxOutputTokens;
-  } else if (typeof args2.agentConfig.max_tokens === "number" && args2.agentConfig.max_tokens > 0) {
-    generationConfig.maxOutputTokens = args2.agentConfig.max_tokens;
-  }
-  if (typeof args2.agentConfig.temperature === "number") {
-    generationConfig.temperature = args2.agentConfig.temperature;
-  }
-  if (Object.keys(generationConfig).length > 0) {
-    request3.generationConfig = generationConfig;
-  }
-  const agentId = randomUUID();
-  const trajectoryId = randomUUID();
-  const step = 2;
-  const requestId = `agent/${agentId}/${Date.now()}/${trajectoryId}/${step}`;
-  const labels = {
-    trajectory_id: trajectoryId,
-    last_step_index: String(step - 1),
-    used_claude: String(isClaude),
-    used_claude_conservative: String(isClaude)
-  };
-  if (profile?.modelEnum) {
-    labels.model_enum = profile.modelEnum;
-  }
-  request3.labels = labels;
-  request3.sessionId = `-${Math.floor(Math.random() * 9e15)}`;
-  return {
-    url: `${resolveAntigravityCloudCodeBaseUrl(args2.agentConfig.customProviderUrl)}${STREAM_PATH}`,
-    envelope: {
-      project: projectId,
-      model,
-      request: request3,
-      requestId,
-      requestType: "agent",
-      userAgent: "antigravity"
-    }
-  };
-}
-function resolveAntigravityFinishReason(upstream) {
-  const normalized = (upstream ?? "").trim().toUpperCase();
-  if (normalized === "MAX_TOKENS") return "length";
-  if (normalized === "SAFETY" || normalized === "RECITATION" || normalized === "PROHIBITED_CONTENT" || normalized === "BLOCKLIST") {
-    return "content_filter";
-  }
-  return "stop";
-}
-function normalizeAntigravityCompletion(decoded) {
-  const { text, toolCalls, usage, finishReason, reasoningContent, events } = decoded;
-  const normalizedFinishReason = (finishReason ?? "").trim().toUpperCase();
-  if (!text && !reasoningContent && toolCalls.length === 0 && !finishReason && !usage) {
-    const body = {
-      error: {
-        message: "antigravity upstream returned an empty stream (no content, finishReason or usage); channel degradation, not model emptiness"
-      },
-      provider_events: events
-    };
-    return {
-      status: 502,
-      text: "",
-      toolCalls: [],
-      providerEvents: events,
-      body
-    };
-  }
-  if (normalizedFinishReason === "MALFORMED_FUNCTION_CALL") {
-    const message2 = "antigravity upstream returned MALFORMED_FUNCTION_CALL (model generated an invalid function call or tool arguments were rejected by upstream)";
-    const providerFailure = {
-      kind: "provider_failure",
-      provider: "antigravity",
-      code: "MALFORMED_FUNCTION_CALL",
-      message: message2,
-      providerReason: "MALFORMED_FUNCTION_CALL",
-      retryable: false,
-      status: 502
-    };
-    return {
-      status: 502,
-      text: "",
-      toolCalls: [],
-      finishReason,
-      providerEvents: events,
-      providerFailure,
-      runtimeProviderFailure: {
-        message: providerFailure.message,
-        retryable: providerFailure.retryable
-      },
-      body: {
-        error: {
-          message: message2,
-          code: "MALFORMED_FUNCTION_CALL",
-          category: "malformed_function_call",
-          providerReason: "MALFORMED_FUNCTION_CALL",
-          retryable: false
-        },
-        provider_failure: providerFailure,
-        provider_events: events
-      }
-    };
-  }
-  const message = {
-    role: "assistant",
-    content: text || null
-  };
-  if (toolCalls.length > 0) message.tool_calls = toolCalls;
-  if (reasoningContent) message.reasoning_content = reasoningContent;
-  return {
-    status: 200,
-    text,
-    ...reasoningContent ? { reasoningContent } : {},
-    toolCalls,
-    ...usage ? { usage } : {},
-    ...finishReason ? { finishReason } : {},
-    providerEvents: events,
-    body: {
-      choices: [{
-        index: 0,
-        message,
-        finish_reason: toolCalls.length > 0 ? "tool_calls" : resolveAntigravityFinishReason(finishReason)
-      }],
-      ...usage ? { usage } : {},
-      provider_events: events
-    }
-  };
-}
-async function fetchAntigravityCloudCodeCompletion(args2) {
-  const fetchImpl = args2.fetchImpl ?? fetch;
-  const { url, envelope } = buildCloudCodeAssistPayload(args2);
-  const response = await fetchImpl(url, {
-    method: "POST",
-    headers: {
-      Authorization: `Bearer ${args2.accessToken}`,
-      "Content-Type": "application/json",
-      "User-Agent": getAntigravityUserAgent()
-    },
-    body: JSON.stringify(envelope),
-    signal: args2.signal
-  });
-  if (!response.ok) {
-    const errorText = await response.text();
-    return {
-      status: response.status,
-      text: "",
-      toolCalls: [],
-      providerEvents: [],
-      // 保留上游结构：Antigravity 的限流 body 同样携带结构化的重置信息，
-      // 压成字符串会让冷却退化成 5 分钟默认值。
-      body: parseUpstreamErrorBody(errorText, response.statusText)
-    };
-  }
-  const chunkStream = streamSseDataValues(response, parseSseDataLineJson);
-  const { text, toolCalls, usage, finishReason, reasoningContent, events } = await accumulateGeminiStream(chunkStream, {
-    onTextDelta: args2.onTextDelta,
-    onReasoningDelta: args2.onReasoningDelta
-  });
-  const normalized = normalizeAntigravityCompletion({
-    text,
-    toolCalls,
-    usage,
-    finishReason,
-    reasoningContent,
-    events
-  });
-  if (normalized.status !== 200 || !text && toolCalls.length === 0) {
-    console.warn(
-      `[antigravity] empty completion: finishReason=${JSON.stringify(finishReason)} reasoningLen=${reasoningContent?.length ?? 0} usage=${JSON.stringify(usage) ?? "none"} model=${String(envelope.model)} base=${new URL(url).host}`
-    );
-  }
-  return normalized;
-}
-
 // packages/agent-runtime/devin/devinProvider.ts
-import { randomBytes, randomUUID as randomUUID2 } from "node:crypto";
+import { randomBytes, randomUUID } from "node:crypto";
 var CLIENT_NAME = "chisel";
 var CLIENT_VERSION = "2026.8.18";
 function writeVarint(fieldNum, value) {
@@ -20221,11 +20090,33 @@ function encodeDevinClientMetadata(token) {
   ]);
 }
 function encodeDevinChatMessage(msg) {
-  const source = msg.role === "assistant" ? 2 : 1;
+  const source = msg.role === "assistant" ? 2 : msg.role === "tool" ? 4 : 1;
   return Buffer.concat([
-    writeStringField(1, randomUUID2()),
+    writeStringField(1, randomUUID()),
     writeVarint(2, source),
-    writeStringField(3, msg.text)
+    writeStringField(3, msg.text),
+    ...(msg.toolCalls ?? []).map(
+      (toolCall) => writeMessageField(
+        6,
+        Buffer.concat([
+          writeStringField(1, toolCall.id),
+          writeStringField(2, toolCall.function.name),
+          writeStringField(3, toolCall.function.arguments)
+        ])
+      )
+    ),
+    ...msg.toolCallId ? [writeStringField(7, msg.toolCallId)] : []
+  ]);
+}
+function encodeDevinToolDefinition(tool) {
+  const fn3 = tool.function ?? {};
+  const name = typeof fn3.name === "string" ? fn3.name : "";
+  const description = typeof fn3.description === "string" ? fn3.description : "";
+  const parameters = fn3.parameters ?? {};
+  return Buffer.concat([
+    writeStringField(1, name),
+    writeStringField(2, description.length > 6998 ? `${description.slice(0, 6995)}...` : description),
+    writeStringField(3, JSON.stringify(parameters))
   ]);
 }
 function writeFixed64Field(fieldNum, val) {
@@ -20242,20 +20133,21 @@ function writeFixed64Field(fieldNum, val) {
   return Buffer.concat([Buffer.from(tagBytes), b]);
 }
 function buildCompletionConfig(params) {
-  const maxTokens = params?.maxTokens ?? 4096;
-  const temp = params?.temperature ?? 0.4;
+  const maxTokens = params?.maxTokens ?? 128e3;
+  const maxNewlines = params?.maxNewlines ?? 400;
+  const temp = params?.temperature ?? 1;
   const topP = params?.topP ?? 0.95;
   return Buffer.concat([
     writeVarint(1, 1),
     writeVarint(2, maxTokens),
-    writeVarint(3, 128e3),
+    writeVarint(3, maxNewlines),
     writeFixed64Field(5, temp),
     writeVarint(7, 40),
     writeFixed64Field(8, topP)
   ]);
 }
 function buildGetChatMessageRequest(params) {
-  const { token, messages, model } = params;
+  const { token, messages, model, tools = [], temperature } = params;
   const metadata = encodeDevinClientMetadata(token);
   let systemPrompt = "";
   const filteredMessages = [];
@@ -20265,14 +20157,19 @@ function buildGetChatMessageRequest(params) {
       systemPrompt = systemPrompt ? `${systemPrompt}
 
 ${text}` : text;
-    } else if (m.role === "user" || m.role === "assistant") {
-      filteredMessages.push({ role: m.role, text });
+    } else if (m.role === "user" || m.role === "assistant" || m.role === "tool") {
+      filteredMessages.push({
+        role: m.role,
+        text,
+        ...m.tool_call_id ? { toolCallId: m.tool_call_id } : {},
+        ...m.tool_calls?.length ? { toolCalls: m.tool_calls } : {}
+      });
     }
   }
   const coalesced = [];
   for (const item of filteredMessages) {
     const last = coalesced[coalesced.length - 1];
-    if (last && last.role === item.role) {
+    if (last && last.role === item.role && item.role !== "tool" && !last.toolCalls?.length && !item.toolCalls?.length) {
       last.text = `${last.text}
 
 ${item.text}`;
@@ -20281,9 +20178,9 @@ ${item.text}`;
     }
   }
   const chatMessageBuffers = coalesced.map((m) => encodeDevinChatMessage(m));
-  const completionConfig = buildCompletionConfig();
+  const completionConfig = buildCompletionConfig({ temperature });
   const modelConfig = Buffer.concat([
-    writeStringField(1, randomUUID2()),
+    writeStringField(1, randomUUID()),
     writeVarint(2, 1),
     writeVarint(3, 4)
   ]);
@@ -20293,8 +20190,9 @@ ${item.text}`;
     ...chatMessageBuffers.map((b) => writeMessageField(3, b)),
     writeVarint(7, 5),
     writeMessageField(8, completionConfig),
+    ...tools.map((tool) => writeMessageField(10, encodeDevinToolDefinition(tool))),
     writeMessageField(15, modelConfig),
-    writeStringField(16, randomUUID2()),
+    writeStringField(16, randomUUID()),
     writeVarint(20, 1),
     writeStringField(21, model)
   ]);
@@ -20323,6 +20221,77 @@ function parseDevinConnectFrames(buffer3) {
     remainder: buffer3.subarray(offset)
   };
 }
+function parseDevinMetadataUsage(metaBytes) {
+  let prompt = 0;
+  let completion;
+  let cacheRead = 0;
+  let cacheWrite = 0;
+  let sawAny = false;
+  let offset = 0;
+  while (offset < metaBytes.length) {
+    let tag = 0;
+    let shift = 0;
+    while (offset < metaBytes.length) {
+      const b = metaBytes[offset++];
+      tag |= (b & 127) << shift;
+      if (!(b & 128)) break;
+      shift += 7;
+    }
+    const fieldNum = tag >>> 3;
+    const wireType = tag & 7;
+    if (wireType === 0) {
+      let val = 0;
+      let s = 0;
+      while (offset < metaBytes.length) {
+        const b = metaBytes[offset++];
+        val |= (b & 127) << s;
+        if (!(b & 128)) break;
+        s += 7;
+      }
+      if (fieldNum === 2) {
+        prompt = val;
+        sawAny = true;
+      } else if (fieldNum === 3) {
+        completion = val;
+        sawAny = true;
+      } else if (fieldNum === 4) {
+        cacheWrite = val;
+        sawAny = true;
+      } else if (fieldNum === 5) {
+        cacheRead = val;
+        sawAny = true;
+      }
+    } else if (wireType === 2) {
+      let len = 0;
+      let s = 0;
+      while (offset < metaBytes.length) {
+        const b = metaBytes[offset++];
+        len |= (b & 127) << s;
+        if (!(b & 128)) break;
+        s += 7;
+      }
+      offset += len;
+    } else {
+      break;
+    }
+  }
+  return sawAny ? { prompt, completion, cacheRead, cacheWrite } : null;
+}
+function attachDevinUpstreamFailure(error, failure) {
+  if (failure) {
+    error.devinUpstreamFailure = failure;
+  }
+  return error;
+}
+function readDevinUpstreamFailure(error) {
+  if (!error || typeof error !== "object") return void 0;
+  const failure = error.devinUpstreamFailure;
+  if (!failure || typeof failure !== "object") return void 0;
+  if (typeof failure.status !== "number" || !Number.isFinite(failure.status)) {
+    return void 0;
+  }
+  return failure;
+}
 function parseDevinConnectTrailer(payload) {
   const text = payload.toString("utf8").trim();
   if (!text || text === "{}") return null;
@@ -20333,7 +20302,11 @@ function parseDevinConnectTrailer(payload) {
     }
     const code = typeof parsed.error.code === "string" ? parsed.error.code : "unknown";
     const message = typeof parsed.error.message === "string" ? parsed.error.message : "Unknown error";
-    return new Error(`Devin Connect upstream error ${code}: ${message}`);
+    return attachDevinUpstreamFailure(
+      new Error(`Devin Connect upstream error ${code}: ${message}`),
+      // Connect/gRPC 的 resource_exhausted 与 HTTP 429 同义（限流/配额耗尽）。
+      code === "resource_exhausted" ? { status: 429, body: parsed.error } : void 0
+    );
   } catch {
     return new Error(`Devin Connect invalid terminal trailer: ${text}`);
   }
@@ -20343,6 +20316,7 @@ function decodeDevinResponsePayload(payload) {
   let content = "";
   let reasoning = "";
   let finishReason = null;
+  let usage = null;
   const events = [];
   while (offset < payload.length) {
     let tag = 0;
@@ -20365,7 +20339,7 @@ function decodeDevinResponsePayload(payload) {
         s += 7;
       }
       if (fieldNum === 5) {
-        finishReason = val === 2 ? "stop" : "length";
+        finishReason = val === 10 ? "tool_calls" : val === 1 || val === 3 ? "length" : "stop";
       }
     } else if (wireType === 2) {
       let len = 0;
@@ -20386,15 +20360,55 @@ function decodeDevinResponsePayload(payload) {
         const text = valBytes.toString("utf8");
         reasoning += text;
         events.push({ type: "reasoning", text });
+      } else if (fieldNum === 6) {
+        let nestedOffset = 0;
+        let id;
+        let name;
+        let argsDelta;
+        while (nestedOffset < valBytes.length) {
+          let nestedTag = 0;
+          let nestedShift = 0;
+          while (nestedOffset < valBytes.length) {
+            const b = valBytes[nestedOffset++];
+            nestedTag |= (b & 127) << nestedShift;
+            if (!(b & 128)) break;
+            nestedShift += 7;
+          }
+          const nestedField = nestedTag >>> 3;
+          const nestedWire = nestedTag & 7;
+          if (nestedWire !== 2) break;
+          let nestedLength = 0;
+          let lengthShift = 0;
+          while (nestedOffset < valBytes.length) {
+            const b = valBytes[nestedOffset++];
+            nestedLength |= (b & 127) << lengthShift;
+            if (!(b & 128)) break;
+            lengthShift += 7;
+          }
+          const nestedValue = valBytes.subarray(nestedOffset, nestedOffset + nestedLength);
+          nestedOffset += nestedLength;
+          const text = nestedValue.toString("utf8");
+          if (nestedField === 1) id = text;
+          else if (nestedField === 2) name = text;
+          else if (nestedField === 3) argsDelta = (argsDelta ?? "") + text;
+        }
+        if (id !== void 0 && name !== void 0) {
+          events.push({ type: "tool-call-start", id, name });
+        }
+        if (argsDelta !== void 0) {
+          events.push({ type: "tool-call-args", argsDelta, ...id ? { id } : {} });
+        }
+      } else if (fieldNum === 7) {
+        usage = parseDevinMetadataUsage(valBytes);
       }
     } else {
       break;
     }
   }
-  return { content, reasoning, finishReason, events };
+  return { content, reasoning, finishReason, events, usage };
 }
 function createDevinProvider(options) {
-  const { token, model = "swe-2", fetchImpl = fetch } = options;
+  const { token, model = "swe-2-max", fetchImpl = fetch, tools = [], temperature } = options;
   return {
     model,
     async complete(messages, opts) {
@@ -20402,7 +20416,9 @@ function createDevinProvider(options) {
       const requestPayload = buildGetChatMessageRequest({
         token,
         messages,
-        model: selectedModel
+        model: selectedModel,
+        tools,
+        temperature
       });
       const frame = buildDevinConnectFrame(requestPayload);
       const response = await fetchImpl(DEVIN_CONNECT_URL, {
@@ -20417,8 +20433,11 @@ function createDevinProvider(options) {
       });
       if (!response.ok) {
         const errText = await response.text().catch(() => "");
-        throw new Error(
-          `Devin Connect upstream returned error ${response.status}: ${errText}`
+        throw attachDevinUpstreamFailure(
+          new Error(
+            `Devin Connect upstream returned error ${response.status}: ${errText}`
+          ),
+          { status: response.status, body: errText }
         );
       }
       if (!response.body) {
@@ -20426,6 +20445,11 @@ function createDevinProvider(options) {
       }
       let text = "";
       let reasoning = "";
+      let finishReason = null;
+      let frameUsage = null;
+      const toolCallOrder = [];
+      const toolCallById = /* @__PURE__ */ new Map();
+      let currentToolCallId = null;
       let buffer3 = Buffer.alloc(0);
       let sawTrailer = false;
       const reader = response.body.getReader();
@@ -20447,13 +20471,34 @@ function createDevinProvider(options) {
               continue;
             }
             const delta = decodeDevinResponsePayload(f.payload);
+            if (delta.usage?.completion !== void 0) {
+              frameUsage = delta.usage;
+            }
             text += delta.content;
             reasoning += delta.reasoning;
+            if (delta.finishReason) finishReason = delta.finishReason;
             for (const event of delta.events) {
               if (event.type === "reasoning") {
                 opts?.onReasoningDelta?.(event.text);
-              } else {
+              } else if (event.type === "content") {
                 opts?.onTextDelta?.(event.text);
+              } else if (event.type === "tool-call-start") {
+                const existing = toolCallById.get(event.id);
+                if (existing) {
+                  existing.name = event.name;
+                } else {
+                  toolCallOrder.push(event.id);
+                  toolCallById.set(event.id, {
+                    id: event.id,
+                    name: event.name,
+                    argumentsText: ""
+                  });
+                }
+                currentToolCallId = event.id;
+              } else {
+                const targetId = event.id ?? currentToolCallId;
+                const target = targetId ? toolCallById.get(targetId) : void 0;
+                if (target) target.argumentsText += event.argsDelta;
               }
             }
           }
@@ -20467,14 +20512,42 @@ function createDevinProvider(options) {
       if (!sawTrailer) {
         throw new Error("Devin Connect upstream ended before the terminal trailer");
       }
-      if (!text && !reasoning) {
-        throw new Error("Devin Connect upstream completed without content");
+      const toolCalls = toolCallOrder.map((id) => {
+        const call = toolCallById.get(id);
+        return {
+          id: call.id,
+          type: "function",
+          function: {
+            name: call.name,
+            arguments: call.argumentsText || "{}"
+          }
+        };
+      });
+      if (!text && !reasoning && toolCalls.length === 0) {
+        throw new Error("Devin Connect upstream completed without content or tool calls");
       }
+      const usage = frameUsage ? {
+        prompt_tokens: frameUsage.prompt + frameUsage.cacheRead,
+        completion_tokens: frameUsage.completion ?? 0,
+        total_tokens: frameUsage.prompt + frameUsage.cacheRead + (frameUsage.completion ?? 0) + frameUsage.cacheWrite,
+        ...frameUsage.cacheRead > 0 ? { prompt_tokens_details: { cached_tokens: frameUsage.cacheRead } } : {},
+        ...frameUsage.cacheWrite > 0 ? { cache_creation_input_tokens: frameUsage.cacheWrite } : {}
+      } : void 0;
       return {
         content: text,
         model: selectedModel,
         provider: "devin",
-        reasoning_content: reasoning || void 0
+        ...usage ? { usage } : {},
+        ...reasoning ? { reasoning_content: reasoning } : {},
+        ...toolCalls.length > 0 ? { tool_calls: toolCalls } : {},
+        // The upstream finish event wins whenever it is present. A tool call
+        // cut off by the length limit has to stay "length" instead of being
+        // relabelled "tool_calls", so probes/telemetry and any downstream
+        // consumer of the final finish_reason no longer see a truncated turn
+        // mislabelled as a normal one. localLoop keeps its own truncation
+        // gates and excludes tool-bearing turns from them.
+        finish_reason: finishReason ?? (toolCalls.length > 0 ? "tool_calls" : "stop"),
+        stream_complete: true
       };
     }
   };
@@ -20493,8 +20566,6 @@ export {
   LOCAL_AGENT_CONFIG_MISSING_CODE,
   LOCAL_TURN_ABORTED_CODE,
   runLocalAgentTurn,
-  parseSseDataLineJson,
-  parseSseDataLineObject,
   codexStreamFailureStatus,
   aggregateResponsesStream,
   buildOpenAiCompatibleChatCompletionRequest,
@@ -20510,8 +20581,6 @@ export {
   createHybridRecordStore,
   isDestructiveShellCommand,
   evaluateShellCommandPolicy,
-  resolveLocalToolPolicy,
-  executeLocalToolWithPolicy,
   filterRetainedLedgerRecords,
   isLineRangeCovered,
   getProcessRegistry,
@@ -20522,16 +20591,14 @@ export {
   internalSearchWorkspace,
   internalListWorkspaceEntries,
   createLocalWorkspaceToolExecutors,
+  buildToolParametersIndex,
+  getAgentRuntimeToolParametersIndex,
+  resolveLocalToolPolicy,
+  executeLocalToolWithPolicy,
   localDialogMessageRecordToRuntimeMessage,
   buildLocalDialogWritePlan,
   buildNoloWorkspaceCliToolExecutors,
   buildLoadSkillExecutor,
-  parseUpstreamErrorBody,
-  isGemini3Model,
-  accumulateGeminiChunks,
-  shouldUseGeminiNativeToolRoute,
-  buildGeminiGenerateContentRequest,
-  resolveAntigravityFinishReason,
-  fetchAntigravityCloudCodeCompletion,
+  readDevinUpstreamFailure,
   createDevinProvider
 };