@algosuite/vo-mcp 0.2.0-beta.69 → 0.2.0-beta.70

package/dist/runner-cli.js

@@ -3852,6 +3852,9 @@ var init_claim_gate_notice = __esm({
 });
 
 // ../../scripts/virtual-office/code-runner/control-plane-knowledge-context.mjs
+function canonicalizeKnowledgeContextQuery(value) {
+  return typeof value === "string" ? value.trimStart().slice(0, KNOWLEDGE_CONTEXT_QUERY_MAX_CHARS) : "";
+}
 function isRetryableStatus(status) {
   return status >= 500 && status <= 599;
 }
@@ -3860,7 +3863,7 @@ function defaultSleep(ms) {
     setTimeout(resolve3, ms);
   });
 }
-async function getTaskKnowledgeContextRequest(req, taskId, { query } = {}, {
+async function getTaskKnowledgeContextRequest(req, taskId, { query, knowledgeRequestId } = {}, {
   taskRequestTimeoutMs,
   invalidateToken = () => {
   },
@@ -3869,7 +3872,9 @@ async function getTaskKnowledgeContextRequest(req, taskId, { query } = {}, {
   }
 } = {}) {
   const body = {};
-  if (typeof query === "string" && query.trim()) body.query = query;
+  const canonicalQuery = canonicalizeKnowledgeContextQuery(query);
+  if (canonicalQuery.trim()) body.query = canonicalQuery;
+  if (typeof knowledgeRequestId === "string" && knowledgeRequestId) body.knowledge_request_id = knowledgeRequestId;
   const path23 = `/api/v1/code-task/${encodeURIComponent(taskId)}/knowledge-context`;
   const timeoutMs = Math.max(Number(taskRequestTimeoutMs) || 0, MIN_KNOWLEDGE_CONTEXT_TIMEOUT_MS);
   for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt += 1) {
@@ -3899,11 +3904,12 @@ async function getTaskKnowledgeContextRequest(req, taskId, { query } = {}, {
   }
   throw new Error("knowledge-context retry loop exited unexpectedly");
 }
-var MIN_KNOWLEDGE_CONTEXT_TIMEOUT_MS, RETRY_DELAYS_MS, MAX_ATTEMPTS;
+var MIN_KNOWLEDGE_CONTEXT_TIMEOUT_MS, KNOWLEDGE_CONTEXT_QUERY_MAX_CHARS, RETRY_DELAYS_MS, MAX_ATTEMPTS;
 var init_control_plane_knowledge_context = __esm({
   "../../scripts/virtual-office/code-runner/control-plane-knowledge-context.mjs"() {
     "use strict";
     MIN_KNOWLEDGE_CONTEXT_TIMEOUT_MS = 15e3;
+    KNOWLEDGE_CONTEXT_QUERY_MAX_CHARS = 2e3;
     RETRY_DELAYS_MS = [2e3, 6e3];
     MAX_ATTEMPTS = RETRY_DELAYS_MS.length + 1;
   }
@@ -4222,8 +4228,8 @@ function createControlPlaneClient({
       return Buffer.from(await res.arrayBuffer());
     },
     // Raised per-attempt timeout (>=15s) + bounded retry — see control-plane-knowledge-context.mjs.
-    async getTaskKnowledgeContext(taskId, { query } = {}) {
-      return getTaskKnowledgeContextRequest(req, taskId, { query }, {
+    async getTaskKnowledgeContext(taskId, { query, knowledgeRequestId } = {}) {
+      return getTaskKnowledgeContextRequest(req, taskId, { query, knowledgeRequestId }, {
         taskRequestTimeoutMs,
         invalidateToken: () => {
           cachedFirebaseToken = null;
@@ -9500,7 +9506,104 @@ var init_methodology_composer = __esm({
   }
 });
 
+// ../../scripts/virtual-office/code-runner/knowledge-exposure-receipt.mjs
+import { createHash as createHash4 } from "node:crypto";
+function sha256Utf8(value) {
+  return createHash4("sha256").update(String(value), "utf8").digest("hex");
+}
+function isUuid(value) {
+  return typeof value === "string" && UUID_RE.test(value);
+}
+function verifyKnowledgeExposureResponse(response, task, requestId) {
+  const context = typeof response?.context_markdown === "string" ? response.context_markdown : null;
+  if (!context || context.length > 6e3) throw new Error("knowledge exposure response has invalid context bytes");
+  if (!isUuid(response?.receipt_id) || !isUuid(response?.knowledge_request_id) || !isUuid(response?.claim_occurrence_id) || !SHA_RE.test(String(response?.context_sha256 ?? ""))) {
+    throw new Error("knowledge exposure response is missing a valid receipt binding");
+  }
+  if (response.knowledge_request_id !== requestId || response.claim_occurrence_id !== task?.claim_occurrence_id) {
+    throw new Error("knowledge exposure response does not bind this composition occurrence");
+  }
+  const contextSha256 = sha256Utf8(context);
+  if (contextSha256 !== response.context_sha256) throw new Error("knowledge exposure context digest mismatch");
+  return Object.freeze({
+    receiptId: response.receipt_id,
+    knowledgeRequestId: requestId,
+    claimOccurrenceId: response.claim_occurrence_id,
+    contextSha256,
+    contextMarkdown: context,
+    contextUtf8Bytes: Buffer.byteLength(context, "utf8"),
+    degraded: response.degraded === true
+  });
+}
+function knowledgeExposurePromptBlock(exposure) {
+  const marker = `<!-- hq-knowledge-receipt:${exposure.receiptId} -->
+`;
+  return {
+    marker,
+    markdown: [
+      "## Knowledge exposure evidence",
+      `Receipt ID: ${exposure.receiptId}`,
+      `Context SHA-256: ${exposure.contextSha256}`,
+      "This records server retrieval/exposure only. It does not prove reading, application, correctness, or benefit.",
+      marker + exposure.contextMarkdown
+    ].join("\n")
+  };
+}
+function buildKnowledgeDispatchAck({ exposure, prompt, agent }) {
+  const { marker } = knowledgeExposurePromptBlock(exposure);
+  const markerAt = String(prompt).indexOf(marker);
+  if (markerAt < 0) throw new Error("composed prompt is missing its knowledge exposure marker");
+  const contextStartChar = markerAt + marker.length;
+  if (String(prompt).slice(contextStartChar, contextStartChar + exposure.contextMarkdown.length) !== exposure.contextMarkdown) {
+    throw new Error("composed prompt knowledge bytes do not match the exposure receipt");
+  }
+  return Object.freeze({
+    receipt_id: exposure.receiptId,
+    knowledge_request_id: exposure.knowledgeRequestId,
+    claim_occurrence_id: exposure.claimOccurrenceId,
+    context_sha256: exposure.contextSha256,
+    prompt_sha256: sha256Utf8(prompt),
+    context_start_utf8_byte: Buffer.byteLength(String(prompt).slice(0, contextStartChar), "utf8"),
+    context_utf8_bytes: exposure.contextUtf8Bytes,
+    agent,
+    prompt_transport: agent === "cursor" ? "argv_materialized" : "stdin_write_attempt",
+    acknowledgement_kind: "process_spawn_prompt_delivery_attempt"
+  });
+}
+function createKnowledgeSpawnAcknowledgement({ exposure, prompt, agent, post }) {
+  const ack = exposure?.receiptId ? buildKnowledgeDispatchAck({ exposure, prompt, agent }) : null;
+  let observedSpawn = false;
+  let recorded = false;
+  const send = async (spawnEvent) => {
+    const patch = ack ? { knowledge_dispatch_ack: ack } : {};
+    const result = await post(spawnEvent ? {
+      stage: "agent_spawned",
+      message: `${agent} process spawned; prompt delivery attempted`,
+      ...patch
+    } : patch);
+    recorded = Boolean(ack && result?.task?.knowledge_dispatch_ack?.receipt_id === ack.receipt_id);
+    return result;
+  };
+  return Object.freeze({
+    acknowledgement: ack,
+    onSpawn: () => {
+      observedSpawn = true;
+      return send(true);
+    },
+    retryIfNeeded: () => ack && observedSpawn && !recorded ? send(false).catch(() => null) : Promise.resolve(null)
+  });
+}
+var UUID_RE, SHA_RE;
+var init_knowledge_exposure_receipt = __esm({
+  "../../scripts/virtual-office/code-runner/knowledge-exposure-receipt.mjs"() {
+    "use strict";
+    UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/iu;
+    SHA_RE = /^[0-9a-f]{64}$/u;
+  }
+});
+
 // ../../scripts/virtual-office/code-runner/task-prompt.mjs
+import { randomUUID as randomUUID3 } from "node:crypto";
 function buildMissingKnowledgeMessage(taskId, reason) {
   const id = taskId || "unknown-task";
   return `task ${id} missing task-scoped AlgoHQ knowledge context: ${reason}`;
@@ -9558,36 +9661,55 @@ function methodologyLedgerFields(methodology) {
   return { ...shape ? { methodology_shape: shape } : {}, ...stakes ? { governed_stakes: stakes } : {} };
 }
 async function composeCodeTaskPrompt(client, task, { log: log2 = () => {
-}, allowMissingKnowledgeContext = false, attachmentManifestMarkdown = "", onMethodology, repoRoot: repoRoot2 } = {}) {
+}, allowMissingKnowledgeContext = false, attachmentManifestMarkdown = "", onMethodology, onKnowledgeExposure, repoRoot: repoRoot2 } = {}) {
   const taskId = task?.code_task_id;
+  const reportNoReceipt = () => {
+    try {
+      onKnowledgeExposure?.(Object.freeze({ status: "no_receipt_degraded" }));
+    } catch {
+    }
+  };
   if (!taskId) {
+    const missing = handleMissingKnowledgeContext(taskId, "missing code_task_id on the claimed task", {
+      allowMissingKnowledgeContext,
+      log: log2
+    });
+    reportNoReceipt();
     return composeDispatchPrompt(withComposedMethodology(withAttachmentManifest(task?.prompt, attachmentManifestMarkdown), task, log2, taskId, onMethodology), {
       repo: task?.repo,
       repoRoot: repoRoot2,
-      knowledgeContextMarkdown: handleMissingKnowledgeContext(taskId, "missing code_task_id on the claimed task", {
-        allowMissingKnowledgeContext,
-        log: log2
-      })
+      knowledgeContextMarkdown: missing
     });
   }
   if (typeof client?.getTaskKnowledgeContext !== "function") {
+    const missing = handleMissingKnowledgeContext(taskId, "control-plane client cannot fetch knowledge context", {
+      allowMissingKnowledgeContext,
+      log: log2
+    });
+    reportNoReceipt();
     return composeDispatchPrompt(withComposedMethodology(withAttachmentManifest(task?.prompt, attachmentManifestMarkdown), task, log2, taskId, onMethodology), {
       repo: task?.repo,
       repoRoot: repoRoot2,
-      knowledgeContextMarkdown: handleMissingKnowledgeContext(taskId, "control-plane client cannot fetch knowledge context", {
-        allowMissingKnowledgeContext,
-        log: log2
-      })
+      knowledgeContextMarkdown: missing
     });
   }
   let knowledgeContextMarkdown;
+  let exposure = null;
   try {
-    const context = await client.getTaskKnowledgeContext(taskId, { query: buildKnowledgeQuery(task) });
+    const receiptRequired = typeof task?.claim_occurrence_id === "string";
+    const knowledgeRequestId = receiptRequired ? randomUUID3() : null;
+    const context = await client.getTaskKnowledgeContext(taskId, {
+      query: buildKnowledgeQuery(task),
+      ...knowledgeRequestId ? { knowledgeRequestId } : {}
+    });
     if (!context || typeof context !== "object") {
       knowledgeContextMarkdown = handleMissingKnowledgeContext(taskId, "control-plane knowledge endpoint returned no context payload", {
         allowMissingKnowledgeContext,
         log: log2
       });
+    } else if (receiptRequired && knowledgeRequestId) {
+      exposure = verifyKnowledgeExposureResponse(context, task, knowledgeRequestId);
+      knowledgeContextMarkdown = knowledgeExposurePromptBlock(exposure).markdown;
     } else {
       knowledgeContextMarkdown = typeof context.context_markdown === "string" ? context.context_markdown : "";
     }
@@ -9597,6 +9719,10 @@ async function composeCodeTaskPrompt(client, task, { log: log2 = () => {
       log: log2
     });
   }
+  try {
+    onKnowledgeExposure?.(exposure ?? Object.freeze({ status: "no_receipt_degraded" }));
+  } catch {
+  }
   const operatorInstructions = buildOperatorInstructionBlock(task);
   const prompt = operatorInstructions ? `${task?.prompt ?? ""}
 
@@ -9613,12 +9739,13 @@ var init_task_prompt = __esm({
     "use strict";
     init_dispatch_onboarding();
     init_methodology_composer();
+    init_knowledge_exposure_receipt();
     ALLOW_MISSING_KNOWLEDGE_CONTEXT_ENV = "VO_CODE_RUNNER_ALLOW_MISSING_KNOWLEDGE_CONTEXT";
   }
 });
 
 // ../../scripts/virtual-office/code-runner/task-attachments.mjs
-import { createHash as createHash4, randomUUID as randomUUID3 } from "node:crypto";
+import { createHash as createHash5, randomUUID as randomUUID4 } from "node:crypto";
 import { chmod, mkdir, mkdtemp, readFile, readdir, realpath, rm, stat, writeFile } from "node:fs/promises";
 import os2 from "node:os";
 import path17 from "node:path";
@@ -9661,7 +9788,7 @@ async function createAttachmentDirectory(taskId, containmentRoot) {
     throw new Error("task-attachment directory escaped the agent worktree root");
   }
   await writeFile(path17.join(directory, GITIGNORE_FILE), GITIGNORE_BODY, { encoding: "utf8", mode: 384 });
-  const marker = JSON.stringify({ owner: MARKER_OWNER, token: randomUUID3(), directory: path17.basename(directory), created_at: (/* @__PURE__ */ new Date()).toISOString() });
+  const marker = JSON.stringify({ owner: MARKER_OWNER, token: randomUUID4(), directory: path17.basename(directory), created_at: (/* @__PURE__ */ new Date()).toISOString() });
   await writeFile(path17.join(directory, MARKER_FILE), marker, { encoding: "utf8", mode: 384 });
   return { directory, marker, root, cleaned: false };
 }
@@ -9759,7 +9886,7 @@ async function materializeTaskAttachments(client, task, { worktreeDir } = {}) {
       const content = await client.downloadTaskAttachment(task.code_task_id, ref.attachment_id);
       if (!Buffer.isBuffer(content)) throw new Error(`attachment ${ref.attachment_id} did not return binary content`);
       if (content.byteLength !== ref.size_bytes) throw new Error(`attachment ${ref.attachment_id} size mismatch`);
-      const sha2562 = createHash4("sha256").update(content).digest("hex");
+      const sha2562 = createHash5("sha256").update(content).digest("hex");
       if (sha2562 !== ref.sha256) throw new Error(`attachment ${ref.attachment_id} sha256 mismatch`);
       const name = sanitizeTaskAttachmentName(ref.name, index);
       const filePath = path17.resolve(state.directory, name);
@@ -9809,9 +9936,9 @@ var init_task_attachments = __esm({
 import { homedir as homedir7 } from "node:os";
 import { join as join11 } from "node:path";
 import { readdir as readdir2, readFile as readFile2, unlink, writeFile as writeFile2 } from "node:fs/promises";
-import { createHash as createHash5 } from "node:crypto";
+import { createHash as createHash6 } from "node:crypto";
 function deriveUuid(seed) {
-  const h = createHash5("sha256").update(seed).digest("hex");
+  const h = createHash6("sha256").update(seed).digest("hex");
   return `${h.slice(0, 8)}-${h.slice(8, 12)}-5${h.slice(13, 16)}-${(parseInt(h.slice(16, 18), 16) & 63 | 128).toString(16)}${h.slice(18, 20)}-${h.slice(20, 32)}`;
 }
 function spoolToCloud(record, ids) {
@@ -11088,7 +11215,7 @@ var init_prepared_job_divergence = __esm({
 
 // ../../scripts/virtual-office/code-runner/prepared-job-shadow.mjs
 import { appendFileSync, mkdirSync as mkdirSync8 } from "node:fs";
-import { createHash as createHash6 } from "node:crypto";
+import { createHash as createHash7 } from "node:crypto";
 import { homedir as homedir9 } from "node:os";
 import { dirname as dirname10, join as join14 } from "node:path";
 function setRemotePreparedJobMode(mode) {
@@ -11377,7 +11504,7 @@ var init_prepared_job_shadow = __esm({
       "methodology_shape",
       "methodology_stakes"
     ];
-    sha256 = (s) => createHash6("sha256").update(String(s ?? ""), "utf8").digest("hex");
+    sha256 = (s) => createHash7("sha256").update(String(s ?? ""), "utf8").digest("hex");
     sameValue = (a, b) => Array.isArray(a) || Array.isArray(b) ? JSON.stringify(a) === JSON.stringify(b) : (a ?? null) === (b ?? null);
     verdictObserver = null;
   }
@@ -12113,7 +12240,7 @@ var init_pr_watcher_failure_confirmation = __esm({
 });
 
 // ../../scripts/virtual-office/code-runner/watcher-coordination.mjs
-import { createHash as createHash7 } from "node:crypto";
+import { createHash as createHash8 } from "node:crypto";
 function ciFixOccurrenceKey({ repo, prNumber, headSha, repairAttempt }) {
   const occurrence = JSON.stringify([
     String(repo).toLowerCase(),
@@ -12121,7 +12248,7 @@ function ciFixOccurrenceKey({ repo, prNumber, headSha, repairAttempt }) {
     String(headSha).toLowerCase(),
     Number(repairAttempt)
   ]);
-  return `ci-fix:v1:${createHash7("sha256").update(occurrence).digest("hex")}`;
+  return `ci-fix:v1:${createHash8("sha256").update(occurrence).digest("hex")}`;
 }
 function coordinationRetryDue(entry, nowMs) {
   return !entry.nextRetryAt || nowMs >= entry.nextRetryAt;
@@ -12251,7 +12378,7 @@ var init_watcher_coordination = __esm({
 });
 
 // ../../scripts/virtual-office/code-runner/watcher-state.mjs
-import { randomUUID as randomUUID4 } from "node:crypto";
+import { randomUUID as randomUUID5 } from "node:crypto";
 import { mkdir as mkdir3, open as open2, readFile as readFile4, rename, unlink as unlink2 } from "node:fs/promises";
 import { dirname as dirname11 } from "node:path";
 async function readWatcherState(stateFile) {
@@ -12271,7 +12398,7 @@ async function readWatcherState(stateFile) {
 async function writeWatcherState(stateFile, state) {
   const directory = dirname11(stateFile);
   await mkdir3(directory, { recursive: true });
-  const temp = `${stateFile}.${process.pid}.${randomUUID4()}.tmp`;
+  const temp = `${stateFile}.${process.pid}.${randomUUID5()}.tmp`;
   let handle;
   try {
     handle = await open2(temp, "wx");
@@ -12814,7 +12941,7 @@ var init_pr_watcher_github = __esm({
 });
 
 // ../../scripts/virtual-office/code-runner/enqueue-autonomous-code-task.mjs
-import { randomUUID as randomUUID5 } from "node:crypto";
+import { randomUUID as randomUUID6 } from "node:crypto";
 function isDefiniteRefusal(err) {
   const status = Number(err?.status);
   if (Number.isFinite(status) && status >= 400 && status < 500) return true;
@@ -12833,7 +12960,7 @@ async function enqueueAutonomousCodeTask(client, task, log2 = () => {
   if (typeof client?.reserveAutonomousDispatchBudget !== "function" || typeof client?.releaseAutonomousDispatchBudget !== "function") {
     throw new Error("autonomous dispatch admission client unavailable");
   }
-  const reservationId = randomUUID5();
+  const reservationId = randomUUID6();
   const admission = await client.reserveAutonomousDispatchBudget({
     requestedBudgetUsd,
     reservationId,
@@ -13597,7 +13724,7 @@ var init_effort_mode_config = __esm({
 });
 
 // ../../scripts/virtual-office/model-registry.mjs
-import { randomUUID as randomUUID6 } from "node:crypto";
+import { randomUUID as randomUUID7 } from "node:crypto";
 import fs11 from "node:fs";
 import os4 from "node:os";
 import path19 from "node:path";
@@ -13608,7 +13735,7 @@ function userCacheRoot() {
     if (home) return path19.join(home, ".claude");
   } catch {
   }
-  return path19.join(os4.tmpdir(), `vo-model-registry-${randomUUID6()}`);
+  return path19.join(os4.tmpdir(), `vo-model-registry-${randomUUID7()}`);
 }
 function resolveCacheBaseDir(env2 = process.env, moduleDir = __dirname) {
   if (env2.VO_MODEL_REGISTRY_CACHE_DIR) return env2.VO_MODEL_REGISTRY_CACHE_DIR;
@@ -15939,7 +16066,7 @@ function consensusReceiptIdFrom(text) {
   const source = String(text ?? "");
   for (const match of source.matchAll(RECEIPT_RE)) {
     const token2 = match[1];
-    if (UUID_RE.test(token2)) return token2.toLowerCase();
+    if (UUID_RE2.test(token2)) return token2.toLowerCase();
     const end = match.index + match[0].length;
     const probe = `${token2.replace(/[_-]+/gu, " ")} ${source.slice(end, end + 40)}`;
     if (RECEIPT_NEGATIVE_RE.test(probe)) continue;
@@ -15956,13 +16083,13 @@ function terminalLedgerPatch(run, nowIso = (/* @__PURE__ */ new Date()).toISOStr
   if (receipt) patch.consensus_receipt_id = receipt;
   return patch;
 }
-var FENCE_RE, KEY_RE, UUID_RE, RECEIPT_RE, RECEIPT_NEGATIVE_RE, PLACEHOLDER_RE;
+var FENCE_RE, KEY_RE, UUID_RE2, RECEIPT_RE, RECEIPT_NEGATIVE_RE, PLACEHOLDER_RE;
 var init_terminal_ledger_patch = __esm({
   "../../scripts/virtual-office/code-runner/terminal-ledger-patch.mjs"() {
     "use strict";
     FENCE_RE = /```vo-decision-request\s*\n([\s\S]*?)```/iu;
     KEY_RE = /^[A-D]$/u;
-    UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/iu;
+    UUID_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/iu;
     RECEIPT_RE = /(?<![A-Za-z0-9_-])(?:consensus[ _-]?)?receipt(?:[ _-]?id)?[`"'*]*\s*[:=#\-\u2013\u2014]\s*[`"'*]*\s*([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}|(?:rcpt|cons)[_-][A-Za-z0-9._:-]{4,115})[`"'*]?/giu;
     RECEIPT_NEGATIVE_RE = /\b(?:not[_-]?available|unavailable|todo|n\/a|none|pending|missing|skipped)\b/iu;
     PLACEHOLDER_RE = /^[\s.\u2026"'`\-_]*$/u;
@@ -16963,7 +17090,7 @@ var init_detached_economics_spool = __esm({
 });
 
 // ../../scripts/virtual-office/code-runner/killed-run-outcome.mjs
-import { randomUUID as randomUUID7 } from "node:crypto";
+import { randomUUID as randomUUID8 } from "node:crypto";
 async function handleKilledRun({
   client,
   id,
@@ -17000,7 +17127,7 @@ async function handleKilledRun({
     };
   }
   if (reason === "claim_authority_changed") {
-    const occurrenceId = randomUUID7();
+    const occurrenceId = randomUUID8();
     const economics = {
       occurrence_id: occurrenceId,
       runner_id: runnerId,
@@ -17279,7 +17406,7 @@ var code_runner_daemon_exports = {};
 __export(code_runner_daemon_exports, {
   main: () => main
 });
-import { randomUUID as randomUUID8 } from "node:crypto";
+import { randomUUID as randomUUID9 } from "node:crypto";
 import { fileURLToPath as fileURLToPath8 } from "node:url";
 function log(msg) {
   console.log(`[code-runner ${(/* @__PURE__ */ new Date()).toISOString()}] ${msg}`);
@@ -17291,6 +17418,7 @@ async function processOneTask(client, task, cfg, runnerInstanceId, swarmAdmissio
   let attachmentBundle = null;
   let run = null;
   let methodology = null;
+  let knowledgeExposure = null;
   let rateLimitResume = null;
   try {
     if (await recoverPreservedCodeTask({ task, cfg, client, log })) return;
@@ -17312,11 +17440,20 @@ async function processOneTask(client, task, cfg, runnerInstanceId, swarmAdmissio
       onMethodology: (m) => {
         methodology = m;
       },
+      onKnowledgeExposure: (exposure) => {
+        knowledgeExposure = exposure;
+      },
       allowMissingKnowledgeContext: process.env.VO_CODE_RUNNER_ALLOW_MISSING_KNOWLEDGE_CONTEXT === "1",
       attachmentManifestMarkdown: attachmentBundle.manifestMarkdown,
       repoRoot: wt.worktreeDir
       // ADR-004 § 11.1c: the skill catalog must be the one THIS agent can read
     }) });
+    const knowledgeSpawn = createKnowledgeSpawnAcknowledgement({
+      exposure: knowledgeExposure,
+      prompt: effortPrompt,
+      agent: sel.agent,
+      post: (patch) => safeProgress(client, id, patch)
+    });
     await runPreparedJobShadow({ client, task, agent: sel.agent, env: process.env, log, local: {
       // ADR-004 § 11.1b SHADOW: default OFF; return value deliberately unread — slice C owns consumption
       prompt: effortPrompt,
@@ -17365,11 +17502,7 @@ async function processOneTask(client, task, cfg, runnerInstanceId, swarmAdmissio
         void safeProgress(client, id, patch).catch(() => {
         });
       },
-      onSpawn: () => safeProgress(
-        client,
-        id,
-        runnerStagePatch("agent_spawned", `${sel.agent} process spawned; execution began`)
-      ),
+      onSpawn: knowledgeSpawn.onSpawn,
       shouldCancel: makeCancellationProbe({
         client,
         taskId: id,
@@ -17380,6 +17513,7 @@ async function processOneTask(client, task, cfg, runnerInstanceId, swarmAdmissio
       cancelPollMs: cfg.cancelPollMs,
       maxWallClockMs: cfg.maxWallClockMs
     });
+    await knowledgeSpawn.retryIfNeeded();
     await assertCanonicalIsolation(canonicalBaseline, { worktreeDir: wt.worktreeDir, taskId: id });
     if (run.killed) {
       const stopped = await handleKilledRun({
@@ -17531,7 +17665,7 @@ Closes #${publicationTarget.supersedesPrNumber}` : "";
 async function main({ env: env2 = process.env, once: once2 = false } = {}) {
   const cfg = loadCodeRunnerConfig(env2, { log });
   await sweepStaleTaskAttachmentDirectories().catch((error) => log(`stale attachment cleanup failed: ${error.message}`));
-  const runnerInstanceId = randomUUID8();
+  const runnerInstanceId = randomUUID9();
   const client = createControlPlaneClient({
     env: env2,
     runnerId: cfg.runnerId,
@@ -17691,6 +17825,7 @@ var init_code_runner_daemon = __esm({
     init_orphan_agent_reaper();
     init_publish_async();
     init_task_prompt();
+    init_knowledge_exposure_receipt();
     init_task_attachments();
     init_loop_ticks();
     init_runner_capacity();