SivanCola fbf0b99ccd fix(agent): count reported totals in local and root token budgets ...

Problem: Accepted total-only usage remained visible to reporting but did not
cross token budgets, allowing additional tool rounds after the known spend.

Root cause: Both local and shared-root enforcement added only input/output
components, so missing or partial splits hid a known reported total.

Fix: Use one accounting helper for the larger of the nonnegative total and
component sum, and saturate both counters. Keep usage, pricing, shadow component
telemetry, context ownership and existing soft-gate/finalization behavior.

Verification: Real OpenAI HTTP/SSE adapter and Boot execute real file tools.
Final19named regressions pass; exact preceding owners fail10 events with9controls.
Root240packages once:24330named passes/215existing skips. Complete Agent race
2162pass/10existing skips; focused Boot race7pass. Vet, pinned lint, check, format,
workflow and release gates pass; four Win/Linuxamd64 checks compile only.

2026-10-28 18:36:33 +08:00

..

assets

Make file delivery an explicit user opt-in

2026-10-21 03:48:14 +08:00

design

fix(worktree): rebuild private index before capturing content

2026-10-24 22:37:40 +08:00

images

feat(studio): offer Standard and Minimal Agent modes

2026-10-18 00:28:15 +08:00

themes

docs(studio): add current theme author guide and starter

2026-10-04 00:04:23 +08:00

.nojekyll

feat(site): minimal v2 landing page for GitHub Pages (#2797)

2026-06-02 19:32:40 -07:00

ACP.md

fix(acp): an inbox refusal says which refusal it is

2026-10-27 18:01:52 +08:00

AGENT_COMPOSITIONS.md

Merge pull request #14152 from lancy69/fix/14126-minimal-image-capability

2026-10-23 05:39:10 -07:00

AGENT_COMPOSITIONS.zh.md

Merge pull request #14152 from lancy69/fix/14126-minimal-image-capability

2026-10-23 05:39:10 -07:00

ANTHROPIC_INTERRUPTED_USAGE.md

fix(anthropic): retain known usage when streaming is interrupted

2026-10-26 23:54:59 +08:00

BILLING.md

fix(usage): keep a subscription's estimate out of the paid total

2026-10-18 10:32:04 -07:00

BOUNDED_ROOT_TOKEN_BUDGET.md

fix(agent): count bounded auxiliary usage in root token scope

2026-10-26 20:30:53 +08:00

BUDGET_USAGE_COMPLETENESS.md

fix(pricing): preserve incomplete estimated usage quotes

2026-10-26 16:23:39 +08:00

CAPABILITY_DIAGNOSTICS.md

docs: bring the contract documents up to the docs standard

2026-09-29 09:40:04 -07:00

CHECKPOINT_CANCELLATION_SECURITY.md

fix(checkpoint): separate writer admission from registry locking

2026-10-25 20:43:12 +08:00

CHECKPOINT_WRITER_ADMISSION_SECURITY.md

Merge studio and preserve job-owned writer token finalization

2026-10-26 02:59:07 +08:00

CHECKPOINTS.md

docs: bring the contract documents up to the docs standard

2026-09-29 09:40:04 -07:00

CHILD_FILE_VIEW_SECURITY.md

fix(agent): give each child independent file observations

2026-10-25 00:13:36 +08:00

claude-desktop-layout-preview.png

feat(desktop): Claude-style workspace layout, file preview, capabilities drawer (#2561)

2026-06-01 07:24:42 -07:00

cli-image-paste-effect.svg

feat(cli): image attachments via paste and dragged file paths (#2508)

2026-05-31 22:29:18 -07:00

cli-theme-effect.svg

Make bare reasonix start interactive sessions

2026-06-17 00:59:36 +08:00

CLI.md

feat(config): support nested project config fallback

2026-10-19 11:36:17 +08:00

CLI.zh-CN.md

feat(config): support nested project config fallback

2026-10-19 11:36:17 +08:00

CONCURRENT_MUTATIONS_REVIEW_SERIES.md

feat(state): introduce independently reviewable mutation transactions

2026-10-24 22:23:12 +08:00

CONFIG_PATHS.md

feat(config): support nested project config fallback

2026-10-19 11:36:17 +08:00

CONTROLLER_ROUTING_ROOT_BUDGET.md

fix(control): account semantic routing in the root task budget

2026-10-27 07:23:30 +08:00

COORDINATOR_ROOT_BUDGET.md

fix(coordinator): share planner and executor root token budgets

2026-10-27 03:14:17 +08:00

DELEGATION_PANIC_OUTCOME_SECURITY.md

fix(delegation): classify panics before settling child outcomes

2026-10-26 10:53:48 +08:00

DESKTOP_CRASH_DIAGNOSTICS_RUNBOOK.md

docs: port the retired-Wails wording cleanup to studio

2026-09-26 14:08:56 +08:00

desktop-theme-dark.jpg

Define a cohesive desktop light and dark theme system (#2636)

2026-06-02 01:45:30 -07:00

desktop-theme-light.jpg

Define a cohesive desktop light and dark theme system (#2636)

2026-06-02 01:45:30 -07:00

desktop-v2-layout-preview.png

feat(desktop): Claude-style workspace layout, file preview, capabilities drawer (#2561)

2026-06-01 07:24:42 -07:00

desktop-v2-skills-preview.png

feat(desktop): Claude-style workspace layout, file preview, capabilities drawer (#2561)

2026-06-01 07:24:42 -07:00

DOCS_STANDARD.md

docs: bring the contract documents up to the docs standard

2026-09-29 09:40:04 -07:00

DSH.md

docs(dsh): say that an installed plugin starts off and must be switched on

2026-10-18 03:55:34 -07:00

embed.go

feat(docs): embed version-matched product documentation

2026-08-04 13:20:08 +08:00

ESTIMATED_USAGE_QUOTE_SECURITY.md

test(pricing): align estimated usage consumer contracts

2026-10-26 16:31:27 +08:00

EXPLICIT_SKILL_ROOT_BUDGET.md

fix(control): bind root budgets for explicit subagent skills

2026-10-27 13:54:03 +08:00

EXTENSION_PROTOCOL.generated.md

chore(extension): regenerate the protocol artifacts for the prompt refusal identity

2026-10-18 04:01:28 -07:00

EXTENSION_PROTOCOL.md

feat(extension): split the session capability, and bound one queued prompt

2026-10-18 04:01:29 -07:00

EXTENSION_RUNTIME_V2_PERF.md

docs: bring the contract documents up to the docs standard

2026-09-29 09:40:04 -07:00

EXTENSION_RUNTIME_V2.md

docs: bring the contract documents up to the docs standard

2026-09-29 09:40:04 -07:00

EXTENSIONS.md

docs(studio): add tested community author workflow

2026-09-29 19:06:43 +08:00

favicon.svg

feat(site): minimal v2 landing page for GitHub Pages (#2797)

2026-06-02 19:32:40 -07:00

FILE_PREVIEW.md

Merge pull request #14063 from SivanCola/codex/present-files-settings

2026-10-23 07:29:33 -07:00

FILE_VIEW_PROVENANCE_SECURITY.md

fix(builtin): bind file views to complete returned reads

2026-10-25 21:21:51 -07:00

GIT_STORAGE_ENVIRONMENT.md

fix(gitcmd): bind host storage to the resolved repository

2026-10-27 05:38:13 +08:00

GOAL_PLANNER_BUDGET_RESUME.md

fix(control): renew the planner budget on Goal spend resume

2026-10-27 11:36:01 +08:00

GOAL_USAGE_SCOPE.md

fix(event): preserve quote and scope capabilities together

2026-10-28 03:53:07 +08:00

GUARDIAN_EXECUTION_SECURITY.md

fix(guardian): enforce read-only execution after capability resolution

2026-10-25 00:57:29 +08:00

GUIDE.md

fix(studio): clarify worktree labels and directory choices

2026-10-27 12:06:27 +08:00

GUIDE.zh-CN.md

fix(studio): clarify worktree labels and directory choices

2026-10-27 12:06:27 +08:00

HISTORY_PAGING.md

feat(history): expose bounded cursor paging independently of the UI

2026-10-24 22:13:10 +08:00

HISTORY_SEARCH_CATALOG.md

fix(sessionstore): bound history replay memory

2026-10-22 19:58:06 +08:00

HOOK_CHECKPOINT_SECURITY.md

fix(checkpoint): cancel admission before invocation entry

2026-10-25 11:14:07 +08:00

HOOK_WORKSPACE_INVALIDATION_SECURITY.md

fix(agent): preserve workspace invalidation for hook effects

2026-10-25 07:29:49 +08:00

index.html

feat(config): the DeepSeek catalog is one declaration, and its rates are one table

2026-09-13 18:47:33 -07:00

ISOLATED_INSPECTION_SECURITY.md

fix(isolation): retain published results on recovery inspection errors

2026-10-25 01:40:02 +08:00

ISOLATED_RECORD_SECURITY.md

fix(isolation): confine recovered-record queries to opened roots

2026-10-25 03:22:32 +08:00

ISOLATION_FIRST_FINISH_SECURITY.md

fix(isolation): retain uninspected work after a runner panic

2026-10-25 22:25:13 +08:00

ISOLATION_NATIVE_CI.md

test(mutation): pin legacy wait admission and adopt reviewed Windows fixes

2026-10-25 15:30:48 +08:00

ISOLATION_OPERATION_LEASE_SECURITY.md

test(filelock): mirror relative-root rename admission

2026-10-25 13:00:44 +08:00

ISOLATION_PREPARATION_SECURITY.md

feat(isolation): prepare Store-owned candidates from one baseline

2026-10-26 01:50:29 +08:00

ISOLATION_RESULT_REINSPECTION_SECURITY.md

fix(isolation): reinspect published results before settlement

2026-10-25 10:20:29 +08:00

ISOLATION_RUNNER_PANIC_SECURITY.md

fix(isolation): retain uninspected work after a runner panic

2026-10-25 22:25:13 +08:00

ISOLATION_RUNTIME_OPTIONS_SECURITY.md

fix(isolation): preserve task runtime selection and step caps

2026-10-25 09:46:07 +08:00

ISOLATION_SETTLEMENT_FENCE_SECURITY.md

fix(isolation): fence ordinary result operations before recovery

2026-10-25 17:20:38 +08:00

JOB_PANIC_RESULT_SECURITY.md

fix(delegation): classify panics before settling child outcomes

2026-10-26 10:53:48 +08:00

JOB_RESOURCE_FINALIZATION_SECURITY.md

fix(jobs): keep recovered panics from becoming successful results

2026-10-26 03:40:51 +08:00

LOCAL_COST_QUOTE.md

fix: use authoritative quotes for local task cost gates

2026-10-28 00:33:05 +08:00

logo-ghost-wave-effect.svg

docs: make logo vertical padding a real 20px at display size

2026-08-08 16:31:47 +08:00

logo-glitch-dark-effect.svg

docs: add animated logo SVG variants

2026-08-08 16:01:33 +08:00

logo-stroke-draw-effect.svg

docs: refine stroke-draw logo variant animation

2026-08-08 17:30:38 +08:00

logo-wave-float-effect.svg

docs: add animated logo SVG variants

2026-08-08 16:01:33 +08:00

logo-wave-hop-effect.svg

docs: add animated logo SVG variants

2026-08-08 16:01:33 +08:00

logo.svg

docs(readme): port the homepage README to v2 (badges, support, contributors)

2026-05-30 05:08:46 -07:00

MARKET_AUTHOR_GUIDE.md

docs(studio): clarify market skill asset packaging

2026-09-29 22:26:04 +08:00

MCP_CREDENTIAL_PROJECTION.md

fix(mcp): redact endpoint credentials fail-closed in every display, preview and export surface

2026-10-03 19:19:58 -07:00

MIGRATING.md

release(studio): stable releases become GitHub latest, without a root latest.json

2026-10-04 20:25:37 -07:00

MODEL_DISPLAY_ALIASES.md

fix(studio): show account and model aliases in composer tooltip

2026-10-27 02:33:39 +08:00

MUTATION_COORDINATOR_SECURITY.md

feat(state): introduce independently reviewable mutation transactions

2026-10-24 22:23:12 +08:00

MUTATION_RECORD_MEMBERS_SECURITY.md

fix(mutation): reject ambiguous coordination record members

2026-10-25 23:34:40 +08:00

MUTATION_RECORD_VALIDATION_SECURITY.md

fix(mutation): reject ambiguous coordination record members

2026-10-25 23:34:40 +08:00

OPAQUE_WRITE_ADMISSION_SECURITY.md

feat(mutation): admit explicitly opaque write effects

2026-10-25 19:21:21 +08:00

OPTIMISTIC_WRITE_ADMISSION_SECURITY.md

fix(agent): admit optimistic child writes through the shared scheduler

2026-10-25 03:58:01 +08:00

paste-folding-effect.svg

feat(composer): fold long pasted text in CLI and desktop (#2517)

2026-06-01 01:50:34 -07:00

PERSONA.md

docs: explain project-specific persona guidance

2026-10-25 23:14:21 +08:00

PLANNER_LOCAL_TASK_BUDGET.md

fix(boot): honor configured task budgets in tool-enabled planner

2026-10-26 18:11:24 +08:00

PLUGIN_PACKAGES.md

feat(extension): split the session capability, and bound one queued prompt

2026-10-18 04:01:29 -07:00

PROCESS_ROOT_WAIT_SECURITY.md

feat(proc): expose tracked root wait completion

2026-10-25 20:00:34 +08:00

project-topic-tabs-context.png

feat(desktop): project topic tabs and context inspector (#2925)

2026-06-04 19:41:16 -07:00

PROVISIONAL_WRITE_LEASE_SECURITY.md

fix(lease): separate run and yielded-claim lifetimes

2026-10-25 06:50:34 +08:00

PUBLISHED_COMMAND_JOB_OWNER.md

test(proc): recognize the Windows recorder by executable path

2026-10-27 11:25:55 +08:00

REASONING_LANGUAGE.md

docs: the references and code the deletion commit left behind

2026-09-16 21:50:24 -07:00

REASONING_PROVIDERS.md

fix(studio): address review on GLM reasoning effort

2026-10-04 16:28:33 +08:00

RECOVERY.md

docs: port the retired-Wails wording cleanup to studio

2026-09-26 14:08:56 +08:00

REPORTED_TOTAL_TOKEN_BUDGET.md

fix(agent): count reported totals in local and root token budgets

2026-10-28 18:36:33 +08:00

ROADMAP.md

release(studio): stable releases become GitHub latest, without a root latest.json

2026-10-04 20:25:37 -07:00

ROLE_FILE_VIEW_SECURITY.md

fix(agent): isolate planner and guardian file observations

2026-10-25 01:12:51 +08:00

ROOT_AUXILIARY_TOKEN_BUDGET.md

fix(agent): charge auxiliary usage to the active root token budget

2026-10-26 19:27:31 +08:00

ROOT_TOKEN_BUDGET_SECURITY.md

Share explicit wall budgets through Agent delegation

2026-10-26 15:15:08 +08:00

ROOT_TRIAGE_TOKEN_BUDGET.md

fix(agent): count triage usage in the root token budget

2026-10-26 21:09:21 +08:00

ROOT_WALL_BUDGET_SECURITY.md

Share explicit wall budgets through Agent delegation

2026-10-26 15:15:08 +08:00

ROOT_WEBSEARCH_TOKEN_BUDGET.md

fix(search): charge native search usage to the active root budget

2026-10-26 22:38:38 +08:00

SESSION_MEMORY_RETRIEVAL.md

fix(memory): a fact that cannot be read is not absent

2026-10-23 12:46:33 +08:00

SESSION_WORKTREES.md

fix(studio): clarify worktree labels and directory choices

2026-10-27 12:06:27 +08:00

SKILLS.md

fix(agent): require MCP bindings for callable grants

2026-10-12 23:36:46 -07:00

slash-command-views.svg

feat(config): the DeepSeek catalog is one declaration, and its rates are one table

2026-09-13 18:47:33 -07:00

SPEC.md

fix(compaction): a finished fold is announced with a code and a typed payload, so it follows the language

2026-10-23 15:18:40 -07:00

STUDIO_IMAGE_PREVIEW.md

docs(studio): keep the image preview notes, drop the embedded screenshots

2026-10-13 20:53:28 -07:00

STUDIO_PARITY.md

fix(studio): restore workspace file drag references

2026-10-21 15:31:19 +08:00

STUDIO_RELEASE.md

fix(release): publish and verify the Studio website changelog

2026-10-19 23:07:01 +08:00

STUDIO_SHELL_BOUNDARIES.md

feat(studio): replace native computer helper with CUA Driver

2026-10-13 08:43:14 -07:00

SUBAGENT_PROFILES.md

feat(config): optimistic claims are the default for sub-agent claims and the write lease

2026-10-22 23:16:04 -07:00

SUBAGENT_PROGRESS.md

docs: bring the contract documents up to the docs standard

2026-09-29 09:40:04 -07:00

SUBAGENT_STATUS_ADMISSION.md

fix(delegation): reject unsupported persisted run states

2026-10-27 17:43:47 +08:00

TASK_CONTRACT.md

docs: bring the contract documents up to the docs standard

2026-09-29 09:40:04 -07:00

THEME_ASSETS.md

feat(desktop): Redesign theme experience with official packs / 主题体验改造与官方主题 (#6614)

2026-07-18 01:11:36 +08:00

THEME_AUTHOR_GUIDE.md

feat(theme): add per-scheme backdrop surface opacity

2026-10-27 02:39:02 +08:00

THEME_PACK.md

feat(theme): let a pack set the shadow menus, popovers and dialogs cast

2026-10-13 19:07:36 -07:00

theme-pack.schema.json

feat(theme): add per-scheme backdrop surface opacity

2026-10-27 02:39:02 +08:00

TOOL_APPROVAL_MODES.md

test(shellparse): cover the delete analysis inside its own package and document the workspace-root refusal

2026-10-02 16:56:38 -07:00

TOOL_CONTRACT.md

feat(tools): propose enabling file delivery cards by default

2026-10-21 12:27:21 +08:00

TRANSCRIPT_PAGING_UI.md

feat(studio): load transcript pages with stable reading anchors

2026-10-24 22:13:10 +08:00

USAGE_CATALOG.md

feat(stats): add idempotent usage rollups

2026-08-10 19:57:37 +08:00

workspace-preparation.md

fix(studio): clarify worktree labels and directory choices

2026-10-27 12:06:27 +08:00

WORKTREE_ENTRY_IDENTITY_SECURITY.md

fix(worktree): compare entry modes during isolated application

2026-10-25 13:08:35 +08:00

WORKTREE_LITERAL_PATH_SECURITY.md

fix(worktree): preserve literal paths through Git application

2026-10-25 14:51:01 +08:00

WORKTREE_SNAPSHOT_SECURITY.md

test(worktree): reject stat-cache-hidden source overwrites

2026-10-24 22:48:54 +08:00