[wangtsiao]

Summary

• Wire the existing Python rlm.find_models() and rlm.spawn(model=..., thinking=...) APIs to real configured, enabled and routable connections.
• Strictly validate selectors, credentials, adapter freshness and thinking levels before child admission. Discovery is local-only, returns no credentials and makes no inference/billing probes.
• Persist each child's own binding and variant across follow-ups, grandchildren, recovery and approval resume. Missing choices inherit the immediate parent; unavailable bindings and unsupported inherited thinking fail explicitly without substituting a default model.
• Keep model IDs containing slashes, request aliases, static variants, credentialless compatible endpoints, and explicitly configured defaults without directory metadata working.
• Add Python, host and multi-provider integration coverage, update Native generated types/schema, prompts and API documentation.

Verification

• Python runtime suite: 77 tests run, 3 skipped, no failures.
• TUI suite: 262 passed, 3 skipped (platform/missing local CLI scenarios).
• cargo clippy --locked --workspace --all-targets -- -D warnings: passed.
• New child-model integration suite: 6/6 passed in both serial and parallel runs, including the real Python → host → mock provider chain.
• Strict model/credential/variant helper tests: 14/14 passed.
• Child metadata isolation regression and invalid-then-valid queued-child regression: passed.
• Rust formatting and diff whitespace checked.
• Broad server unit run: 548 passed, 2 ignored, with 3 failures in existing non-Git-directory detection tests with this container's filesystem-discovery behavior and an initially missing-subscription queue test assertion. The queue test was fixed and passed. A final broad rerun with the container's Git filesystem-discovery adjustment was launched, but its result could not be retrieved after the execution environment became unavailable. The complete Rust workspace suite subsequently passed in GitHub CI.

Availability contract

Catalog availability means local configuration, credentials and an installed matching route, not live provider health or credit. No paid probes were run. A missing model's metadata/binding is an explicit failure, not permission to change provider/model. Direct endpoint/credential edits require reconnecting to install matching adapters.

Independent review of exact head 63fa71d047f02869e71d0255d0e3ff0ed8395bc9 completed with no blocking findings. All 23 GitHub checks passed for that exact head, including the complete Rust workspace suite and all six runtime bundle targets. Repository merge state is clean; no unresolved review threads.