Q77: a session keeps the model and account it started with

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

src/main/database/migrations/076-run-pins.ts

@@ -0,0 +1,7 @@
+export const runPinsSchema = `
+  alter table task_runs add column run_model text;
+  alter table task_runs add column run_credential_id text;
+
+  insert into schema_migrations(version, name, applied_at)
+  values (76, 'run_pins', datetime('now'));
+`;

src/main/database/schema.ts

@@ -74,6 +74,7 @@ import { spendSchema } from "./migrations/072-spend";
 import { usageWindowTokensSchema } from "./migrations/073-usage-window-tokens";
 import { runFailureKindSchema } from "./migrations/074-run-failure-kind";
 import { providerCooldownsSchema } from "./migrations/075-provider-cooldowns";
+import { runPinsSchema } from "./migrations/076-run-pins";
 
 interface Migration {
   version: number;
@@ -157,6 +158,7 @@ const MIGRATIONS: Migration[] = [
   { version: 73, name: "usage_window_tokens", sql: usageWindowTokensSchema },
   { version: 74, name: "run_failure_kind", sql: runFailureKindSchema },
   { version: 75, name: "provider_cooldowns", sql: providerCooldownsSchema },
+  { version: 76, name: "run_pins", sql: runPinsSchema },
 ];
 
 const SCHEMA_VERSION = MIGRATIONS[MIGRATIONS.length - 1].version;

src/main/services/provider-response-runner.ts

@@ -17,7 +17,7 @@ import { selectToolTurn, supportsToolTurn } from "./provider-tool-turns/router";
 import { resolveTurnCredential } from "./provider-tool-turns/credential-resolver";
 import { currentRunId } from "./run-control";
 import { budgetBlock, isPriced, promptChars, providerPrices } from "./spend";
-import { effectiveModel } from "./task-run-preparation";
+import { assertModelSelectable, effectiveModel } from "./task-run-preparation";
 import {
   HEALTH_STATE_HEALTHY,
   WORKSPACE_SCOPES,
@@ -122,11 +122,15 @@ export class ProviderResponseRunner {
     const agent = taskRunId
       ? this.deps.db.prepare("select a.id, a.department, a.model_id from task_runs r join agents a on a.id = r.agent_id where r.id = ?").get(taskRunId) as { id: string; department: string; model_id: string | null }
       : null;
-    // Azure calls the deployment stored with its credential, so an agent there cannot pick another model.
-    if (provider.provider_key === "azure-openai" && agent?.model_id && agent.model_id !== provider.model) {
-      throw new Error(`Azure OpenAI calls the deployment configured on the provider; this agent asks for "${agent.model_id}". Clear the agent's model or set it to "${provider.model}".`);
+    const pins = taskRunId
+      ? this.deps.db.prepare("select run_model, run_credential_id from task_runs where id = ?").get(taskRunId) as { run_model: string | null; run_credential_id: string | null }
+      : null;
+    if (pins?.run_credential_id && pins.run_credential_id !== provider.credential_id) {
+      throw new Error("The provider's account was reconnected during this session; the next session continues with the new account.");
     }
-    const model = effectiveModel(agent?.model_id ?? null, provider.model);
+    // Every turn of a session calls the model the session started with (checked then), whatever the configuration says now.
+    if (!pins?.run_model) assertModelSelectable(provider.provider_key, agent?.model_id ?? null, provider.model);
+    const model = pins?.run_model ?? effectiveModel(agent?.model_id ?? null, provider.model);
     if (!model) throw new Error("Provider model is required.");
     const owner: ProviderRow & { model: string } = { ...provider, model };
     const turn = this.deps.toolTurn ?? selectToolTurn(provider.provider_key);

src/main/services/task-execution-service.ts

@@ -37,7 +37,7 @@ import { ConnectorGrantsService } from "./composio/connector-grants";
 import { ProviderCooldowns } from "./provider-cooldowns";
 import { HeartbeatScheduler } from "./heartbeat-scheduler";
 import {
-  assertExecutionApproval, createIsolationContext, effectiveModel, executionApprovalProblem, loadGoal, loadProject, loadWorkspace,
+  assertExecutionApproval, assertModelSelectable, createIsolationContext, effectiveModel, executionApprovalProblem, loadGoal, loadProject, loadWorkspace,
   requireAgentProvider, requireAssignedAgent, requireTask, sameWorkspaceAccess, workspaceAccess,
 } from "./task-run-preparation";
 
@@ -175,7 +175,15 @@ export class TaskExecutionService {
     let providerRequestId: string | null = null;
     let skillRuntimeSnapshot: SkillRuntimeSnapshotRow | null = null;
     try {
-      skillRuntimeSnapshot = this.resolveSkillRuntimeSnapshot(orgId, agent.id, runId, skillBudgetTokens(provider.context_window_tokens), `${task.title}\n${task.description}`, { providerKey: provider.provider_key, model: effectiveModel(agent.model_id, provider.model) }, task.writing_mode === WRITING_MODE.CONVERSATIONAL);
+      // The session keeps the model and account it started with; a resumed run keeps its original pins.
+      const pinned = (this.db.prepare("select run_model from task_runs where id = ?").get(runId) as { run_model: string | null }).run_model;
+      if (pinned === null) {
+        assertModelSelectable(provider.provider_key, agent.model_id, provider.model);
+        this.db.prepare("update task_runs set run_model = ?, run_credential_id = ? where id = ?")
+          .run(effectiveModel(agent.model_id, provider.model), provider.credential_id, runId);
+      }
+      const runModel = pinned ?? effectiveModel(agent.model_id, provider.model);
+      skillRuntimeSnapshot = this.resolveSkillRuntimeSnapshot(orgId, agent.id, runId, skillBudgetTokens(provider.context_window_tokens), `${task.title}\n${task.description}`, { providerKey: provider.provider_key, model: runModel }, task.writing_mode === WRITING_MODE.CONVERSATIONAL);
       // Watermark for reply delivery and mid-run message polling.
       const runStartedAt = new Date().toISOString();
       const chatContext = loadChatWakeContext(this.db, orgId, agent.id, isolation.secretScopeJson);
@@ -227,6 +235,7 @@ export class TaskExecutionService {
             handoffLines: renderTaskHandoff(this.db, orgId, task.handoff_json),
             knowledgeLines: relevantKnowledgeLines(this.db, { orgId, agentId: agent.id, projectId: task.project_id, goalId: task.goal_id, taskId: task.id }, `${task.title}\n${task.description}`),
             priorCompletedRuns: this.completedRunCount(task.id, runId),
+            runModel,
             journalLines: runJournalLines(this.db, task.id),
             subtasks: (this.db.prepare("select title, status = 'done' as done from tasks where parent_task_id = ? order by created_at").all(task.id) as Array<{ title: string; done: number }>)
               .map((row) => ({ title: row.title, done: row.done === 1 })),

src/main/services/task-prompts.ts

@@ -1,6 +1,5 @@
 import { WRITING_MODE, type WritingMode } from "../../shared/domain";
 import { CEO_FIRST_HIRES, firstHiresFor, leadsPeople } from "./org-building";
-import { effectiveModel } from "./task-run-preparation";
 import { canonicalMentionHandle } from "../../shared/mention-handles";
 
 const RECORD_LEARNINGS_INSTRUCTION =
@@ -41,6 +40,7 @@ export interface TaskExecutionProviderRow {
   label: string;
   provider_key: string;
   model: string | null;
+  credential_id: string | null;
   context_window_tokens: number;
 }
 
@@ -202,6 +202,8 @@ export function buildTaskPrompt(input: {
   knowledgeLines: string[];
   /** Completed runs this task already spent without reaching done. */
   priorCompletedRuns: number;
+  /** The model this session calls (pinned at its start). */
+  runModel: string | null;
   /** What earlier sessions on this task already did, and where the last one failed. */
   journalLines: string[];
   /** Names of the tools the model can call this run. */
@@ -221,7 +223,7 @@ export function buildTaskPrompt(input: {
     `Requires filesystem: ${input.task.requires_filesystem === 1 ? "yes" : "no"}`,
     `Assignee: ${input.agent.name} (${input.agent.role})`,
     ...(input.managerName ? [`Reports to: ${input.managerName}`] : []),
-    `Provider: ${input.provider.label} ${effectiveModel(input.agent.model_id, input.provider.model) ?? ""}`.trim(),
+    `Provider: ${input.provider.label} ${input.runModel ?? ""}`.trim(),
     `Execution context: ${input.isolation.executionContextId}`,
     `Service identity: ${input.isolation.serviceIdentityId}`,
   ];

src/main/services/task-run-preparation.ts

@@ -67,6 +67,13 @@ export function sameWorkspaceAccess(mountJson: string, current: Array<{ workspac
   return JSON.stringify(recorded) === JSON.stringify(current);
 }
 
+/** Azure calls the deployment stored with its credential, so an agent there cannot pick another model. */
+export function assertModelSelectable(providerKey: string, agentModelId: string | null, providerModel: string | null): void {
+  if (providerKey === "azure-openai" && agentModelId && agentModelId !== providerModel) {
+    throw new Error(`Azure OpenAI calls the deployment configured on the provider; this agent asks for "${agentModelId}". Clear the agent's model or set it to "${providerModel}".`);
+  }
+}
+
 /** The model a run calls: the agent's own choice, or else its provider's default. */
 export function effectiveModel(agentModelId: string | null, providerModel: string | null): string | null {
   return agentModelId?.trim() || providerModel;
@@ -75,7 +82,7 @@ export function effectiveModel(agentModelId: string | null, providerModel: strin
 export function requireAgentProvider(db: DatabaseSync, orgId: string, agent: TaskExecutionAgentRow): TaskExecutionProviderRow {
   if (!agent.model_provider_id) throw new Error("Task assignee requires a model provider.");
   const provider = db.prepare(`
-    select id, label, provider_key, model, context_window_tokens
+    select id, label, provider_key, model, credential_id, context_window_tokens
     from providers
     where id = ? and org_id = ?
   `).get(agent.model_provider_id, orgId) as TaskExecutionProviderRow | undefined;