@algosuite/vo-mcp 0.2.0-beta.72 → 0.2.0-beta.74

package/dist/runner-cli.js

@@ -314,21 +314,21 @@ function backupConfigOnce(configPath) {
   copyFileSync(configPath, backupPath);
   return backupPath;
 }
-function writeFileAtomic(path24, content) {
-  sweepStaleTempFiles(path24);
-  const temp = `${path24}.vo-mcp-tmp-${process.pid}-${Date.now()}`;
+function writeFileAtomic(path25, content) {
+  sweepStaleTempFiles(path25);
+  const temp = `${path25}.vo-mcp-tmp-${process.pid}-${Date.now()}`;
   try {
     writeFileSync2(temp, content, { encoding: "utf8", mode: 384 });
-    if (existsSync3(path24)) {
+    if (existsSync3(path25)) {
       try {
-        chmodSync2(temp, statSync(path24).mode & 511);
+        chmodSync2(temp, statSync(path25).mode & 511);
       } catch {
       }
     }
     let lastErr = null;
     for (let attempt = 0; attempt < RENAME_RETRIES; attempt += 1) {
       try {
-        renameSync(temp, path24);
+        renameSync(temp, path25);
         return;
       } catch (err) {
         lastErr = err;
@@ -337,7 +337,7 @@ function writeFileAtomic(path24, content) {
         sleepSync(RENAME_RETRY_MS);
       }
     }
-    writeFileSync2(path24, content, "utf8");
+    writeFileSync2(path25, content, "utf8");
     try {
       unlinkSync2(temp);
     } catch {
@@ -503,8 +503,8 @@ function tablePath(line) {
 function tableSections(lines) {
   const starts = [];
   for (let index = 0; index < lines.length; index += 1) {
-    const path24 = tablePath(lines[index] ?? "");
-    if (path24) starts.push({ path: path24, start: index });
+    const path25 = tablePath(lines[index] ?? "");
+    if (path25) starts.push({ path: path25, start: index });
   }
   return starts.map((section, index) => ({
     ...section,
@@ -696,11 +696,11 @@ function resolveLinuxConfigHome(home, env2) {
   const configured = env2["XDG_CONFIG_HOME"]?.trim();
   return configured && isAbsolute2(configured) ? configured : join5(home, ".config");
 }
-function launcherIsCurrent(path24, desiredContent, label, log2) {
-  if (!existsSync6(path24)) return false;
-  if (readFileSync5(path24, "utf8") === desiredContent) return true;
-  const backupPath = `${path24}.backup-${Date.now()}`;
-  copyFileSync2(path24, backupPath);
+function launcherIsCurrent(path25, desiredContent, label, log2) {
+  if (!existsSync6(path25)) return false;
+  if (readFileSync5(path25, "utf8") === desiredContent) return true;
+  const backupPath = `${path25}.backup-${Date.now()}`;
+  copyFileSync2(path25, backupPath);
   log2(`  Backed up existing ${label} to: ${backupPath}`);
   return false;
 }
@@ -916,17 +916,17 @@ function resolveDesktopConfigPath(home, plat, appData) {
   }
   return join6(home, ".config", "Claude", "claude_desktop_config.json");
 }
-function readClaudeConfig(path24) {
-  if (!existsSync7(path24)) return { kind: "absent", config: {}, mtimeMs: null };
+function readClaudeConfig(path25) {
+  if (!existsSync7(path25)) return { kind: "absent", config: {}, mtimeMs: null };
   for (let attempt = 0; attempt < 3; attempt += 1) {
-    const before = statSync3(path24).mtimeMs;
+    const before = statSync3(path25).mtimeMs;
     let raw;
     try {
-      raw = readFileSync6(path24, "utf8");
+      raw = readFileSync6(path25, "utf8");
     } catch {
       return { kind: "invalid", config: {}, mtimeMs: before };
     }
-    if (!existsSync7(path24) || statSync3(path24).mtimeMs !== before) continue;
+    if (!existsSync7(path25) || statSync3(path25).mtimeMs !== before) continue;
     const text = raw.replace(/^\uFEFF/u, "");
     if (!text.trim()) return { kind: "empty", config: {}, mtimeMs: before };
     try {
@@ -938,9 +938,9 @@ function readClaudeConfig(path24) {
   }
   return { kind: "invalid", config: {}, mtimeMs: null };
 }
-function writeClaudeConfig(path24, config) {
-  mkdirSync6(dirname4(path24), { recursive: true });
-  writeFileAtomic(path24, `${JSON.stringify(config, null, 2)}
+function writeClaudeConfig(path25, config) {
+  mkdirSync6(dirname4(path25), { recursive: true });
+  writeFileAtomic(path25, `${JSON.stringify(config, null, 2)}
 `);
 }
 function carriedEntryKeys(entry) {
@@ -3515,1185 +3515,1271 @@ var init_installation_token = __esm({
   }
 });
 
-// ../../scripts/virtual-office/code-runner/control-plane-heartbeat-body.mjs
-function buildRunnerHeartbeatBody({
-  runnerId,
-  runnerInstanceId,
-  operatorId,
-  uptimeSec,
-  activeTasks,
-  maxConcurrency,
-  effectiveConcurrency,
-  measuredTaskSlots,
-  measuredCpuSlots,
-  measuredMemorySlots,
-  version,
-  daemonVersion,
-  nodeVersion,
-  defaultAgent,
-  supervisorInstanceId,
-  supervisorVersion,
-  supervisorCapabilities,
-  servedRepos,
-  servedOperators,
-  availableAgents,
-  accountUsage,
-  availableLocalModels,
-  supportedTaskKinds,
-  prepared_job_shadow: preparedJobShadow
-} = {}) {
-  const body = { runner_id: runnerId, ...preparedJobShadow ? { prepared_job_shadow: preparedJobShadow } : {} };
-  if (runnerInstanceId) body.runner_instance_id = runnerInstanceId;
-  if (operatorId) body.operator_id = operatorId;
-  if (typeof uptimeSec === "number") body.uptime_sec = uptimeSec;
-  if (typeof activeTasks === "number") body.active_tasks = activeTasks;
-  if (typeof maxConcurrency === "number") body.max_concurrency = maxConcurrency;
-  if (typeof effectiveConcurrency === "number") body.effective_concurrency = effectiveConcurrency;
-  if (typeof measuredTaskSlots === "number") body.measured_task_slots = measuredTaskSlots;
-  if (typeof measuredCpuSlots === "number") body.measured_cpu_slots = measuredCpuSlots;
-  if (typeof measuredMemorySlots === "number") body.measured_memory_slots = measuredMemorySlots;
-  if (version) body.version = version;
-  if (daemonVersion) body.daemon_version = daemonVersion;
-  if (nodeVersion) body.node_version = nodeVersion;
-  if (defaultAgent) body.default_agent = defaultAgent;
-  if (supervisorInstanceId) body.supervisor_instance_id = supervisorInstanceId;
-  if (supervisorVersion) body.supervisor_version = supervisorVersion;
-  if (Array.isArray(supervisorCapabilities) && supervisorCapabilities.length > 0) {
-    body.supervisor_capabilities = supervisorCapabilities;
-  }
-  if (Array.isArray(servedRepos) && servedRepos.length > 0) body.served_repos = servedRepos;
-  if (Array.isArray(servedOperators) && servedOperators.length > 0) {
-    body.served_operator_ids = servedOperators;
+// ../../scripts/virtual-office/code-runner/claude-credential-choice.mjs
+function isTruthyFlag(v) {
+  const s = String(v ?? "").trim().toLowerCase();
+  return s === "1" || s === "true" || s === "yes" || s === "on";
+}
+function wantsLogin(env2) {
+  return isTruthyFlag(env2[CLAUDE_PREFER_LOGIN_ENV]) || isTruthyFlag(env2[PREFER_LOGIN_ENV]);
+}
+function wantsKey(env2) {
+  return isTruthyFlag(env2[CLAUDE_PREFER_KEY_ENV]) || isTruthyFlag(env2[PREFER_KEY_ENV]);
+}
+function classifyClaudeCredential(baseEnv = {}, { getKey, probeLogin } = {}) {
+  const preferKey = wantsKey(baseEnv);
+  if (!preferKey && wantsLogin(baseEnv)) {
+    return { source: CLAUDE_CREDENTIAL_SOURCE.PREFER_LOGIN, key: null };
   }
-  if (Array.isArray(availableAgents) && availableAgents.length > 0) {
-    body.available_agents = availableAgents;
+  if (baseEnv.ANTHROPIC_API_KEY) {
+    return { source: CLAUDE_CREDENTIAL_SOURCE.ENV_KEY, key: null };
   }
-  if (Array.isArray(accountUsage) && accountUsage.length > 0) {
-    body.account_usage = accountUsage;
+  const key = getKey();
+  if (!key) {
+    return { source: CLAUDE_CREDENTIAL_SOURCE.NO_KEY, key: null };
   }
-  if (Array.isArray(availableLocalModels) && availableLocalModels.length > 0) {
-    body.available_local_models = availableLocalModels;
+  if (preferKey) {
+    return { source: CLAUDE_CREDENTIAL_SOURCE.KEYCHAIN_PREFER_KEY, key };
   }
-  if (Array.isArray(supportedTaskKinds) && supportedTaskKinds.length > 0) {
-    body.supported_task_kinds = supportedTaskKinds;
+  if (probeLogin() === true) {
+    return { source: CLAUDE_CREDENTIAL_SOURCE.SUBSCRIPTION_WINS, key: null };
   }
-  return body;
+  return { source: CLAUDE_CREDENTIAL_SOURCE.KEYCHAIN, key };
 }
-var init_control_plane_heartbeat_body = __esm({
-  "../../scripts/virtual-office/code-runner/control-plane-heartbeat-body.mjs"() {
+var PREFER_LOGIN_ENV, CLAUDE_PREFER_LOGIN_ENV, PREFER_KEY_ENV, CLAUDE_PREFER_KEY_ENV, CLAUDE_CREDENTIAL_SOURCE;
+var init_claude_credential_choice = __esm({
+  "../../scripts/virtual-office/code-runner/claude-credential-choice.mjs"() {
     "use strict";
+    PREFER_LOGIN_ENV = "VO_RUNNER_PREFER_LOGIN";
+    CLAUDE_PREFER_LOGIN_ENV = "VO_RUNNER_CLAUDE_PREFER_LOGIN";
+    PREFER_KEY_ENV = "VO_RUNNER_PREFER_KEY";
+    CLAUDE_PREFER_KEY_ENV = "VO_RUNNER_CLAUDE_PREFER_KEY";
+    CLAUDE_CREDENTIAL_SOURCE = Object.freeze({
+      /** PREFER_LOGIN set (and not overridden): any API key is ignored. */
+      PREFER_LOGIN: "prefer_login",
+      /** An explicit ANTHROPIC_API_KEY in the environment — the manual override. */
+      ENV_KEY: "env_key",
+      /** No key anywhere; the spawn falls through to the login session. */
+      NO_KEY: "no_key",
+      /** A stored key, used because the operator explicitly opted out of tier 1. */
+      KEYCHAIN_PREFER_KEY: "keychain_prefer_key",
+      /** A stored key exists but a proven live subscription outranks it. */
+      SUBSCRIPTION_WINS: "subscription_wins",
+      /** A stored key, used because no live subscription was proven. */
+      KEYCHAIN: "keychain"
+    });
   }
 });
 
-// ../../scripts/virtual-office/code-runner/control-plane-promote.mjs
-async function promoteDraftPrRequest(req, prNumber, automationContext, onUnauthorized = () => {
-}) {
-  const res = await req("POST", "/api/v1/admin/pr/promote-draft", { prNumber, automationContext }, { timeoutMs: 6e4 });
-  if (res.status === 401) {
-    onUnauthorized();
-    throw new Error("promote-draft unauthorized (401)");
-  }
-  const json = await res.json().catch(() => ({}));
-  if (res.ok && json?.ok === true) {
-    return {
-      status: json.promoted === true ? json.auto_merge_disarmed === true ? "promoted (auto-merge disarmed)" : "promoted" : json.already_ready === true ? "already_ready" : "unchanged",
-      headSha: typeof json.head_sha === "string" ? json.head_sha : null,
-      reason: typeof json.blocked_reason === "string" ? json.blocked_reason : null
-    };
+// ../../scripts/virtual-office/code-runner/windows-claude-launch.mjs
+import { existsSync as existsSync8, realpathSync } from "node:fs";
+import { win32 as path12 } from "node:path";
+import { spawnSync } from "node:child_process";
+function pathValue(env2) {
+  for (const key of ["Path", "PATH", "path"]) {
+    if (typeof env2?.[key] === "string") return env2[key];
   }
-  const code = typeof json?.error === "string" ? json.error : null;
-  const err = new Error(`promote-draft failed: HTTP ${res.status}${code ? ` (${code})` : ""}${json?.reason ? ` \u2014 ${json.reason}` : ""}`);
-  err.status = res.status;
-  err.code = code;
-  throw err;
+  return "";
 }
-var init_control_plane_promote = __esm({
-  "../../scripts/virtual-office/code-runner/control-plane-promote.mjs"() {
-    "use strict";
+function cleanPathSegment(value) {
+  const trimmed = String(value || "").trim();
+  return trimmed.startsWith('"') && trimmed.endsWith('"') ? trimmed.slice(1, -1) : trimmed;
+}
+function envValue(env2, name) {
+  const exact = env2?.[name];
+  if (typeof exact === "string") return exact.trim();
+  const key = Object.keys(env2 || {}).find((candidate) => candidate.toLowerCase() === name.toLowerCase());
+  return typeof env2?.[key] === "string" ? env2[key].trim() : "";
+}
+function userClaudeCandidates(bin, env2) {
+  if (!/^claude(?:\.(?:exe|cmd|ps1))?$/iu.test(bin)) return [];
+  const userProfile = envValue(env2, "USERPROFILE");
+  const appData = envValue(env2, "APPDATA") || (userProfile ? path12.join(userProfile, "AppData", "Roaming") : "");
+  const localAppData = envValue(env2, "LOCALAPPDATA") || (userProfile ? path12.join(userProfile, "AppData", "Local") : "");
+  const candidates = [];
+  if (appData) {
+    const npmBin = path12.join(appData, "npm");
+    candidates.push(
+      path12.join(npmBin, "claude.exe"),
+      path12.join(npmBin, "claude.cmd"),
+      path12.join(npmBin, "claude.ps1"),
+      path12.join(npmBin, "claude"),
+      path12.join(npmBin, ...NATIVE_CLAUDE_PARTS)
+    );
   }
-});
-
-// ../../scripts/virtual-office/code-runner/control-plane-task-list.mjs
-async function listAllPrOpenedTasks(request) {
-  const tasks = [];
-  let beforeCreatedAt = "";
-  let beforeId = "";
-  for (; ; ) {
-    const params = new URLSearchParams({
-      status: "pr_opened",
-      limit: String(PAGE_SIZE),
-      runner_adoption: "1"
-    });
-    if (beforeCreatedAt) {
-      params.set("before_created_at", beforeCreatedAt);
-      params.set("before_id", beforeId);
-    }
-    const res = await request("GET", `/api/v1/code-task?${params}`);
-    if (!res.ok) throw new Error(`listPrOpenedTasks failed: HTTP ${res.status}`);
-    const json = await res.json();
-    const page = Array.isArray(json?.tasks) ? json.tasks : [];
-    tasks.push(...page);
-    if (page.length < PAGE_SIZE) return tasks;
-    const last = page.at(-1);
-    if (!last?.created_at || !last?.code_task_id) {
-      throw new Error("listPrOpenedTasks pagination cursor missing");
-    }
-    beforeCreatedAt = last.created_at;
-    beforeId = last.code_task_id;
+  if (userProfile) candidates.push(path12.join(userProfile, ".local", "bin", "claude.exe"));
+  if (localAppData) {
+    candidates.push(
+      path12.join(localAppData, "Microsoft", "WinGet", "Links", "claude.exe"),
+      path12.join(localAppData, "Microsoft", "WindowsApps", "claude.exe")
+    );
   }
+  return candidates;
 }
-var PAGE_SIZE;
-var init_control_plane_task_list = __esm({
-  "../../scripts/virtual-office/code-runner/control-plane-task-list.mjs"() {
-    "use strict";
-    PAGE_SIZE = 500;
-  }
-});
-
-// ../../scripts/virtual-office/code-runner/control-plane-resume.mjs
-async function resumeCodeTaskRequest(req, taskId, { automaticRateLimit = false, automaticContinuation = false } = {}, onUnauthorized = () => {
-}) {
-  const res = await req(
-    "POST",
-    `/api/v1/code-task/${encodeURIComponent(taskId)}/resume`,
-    automaticRateLimit ? { automatic_rate_limit: true } : automaticContinuation ? { automatic_continuation: true } : {}
-  );
-  if (res.status === 401) {
-    onUnauthorized();
-    throw new Error("resume unauthorized (401)");
+function pathCandidates(bin, env2) {
+  if (path12.isAbsolute(bin) || /[\\/]/u.test(bin)) {
+    return [path12.resolve(bin)];
   }
-  if (!res.ok) {
-    let code = null;
-    try {
-      const body = await res.json();
-      code = typeof body?.error === "string" ? body.error : null;
-    } catch {
-    }
-    const err = new Error(`resume failed: HTTP ${res.status}${code ? ` (${code})` : ""}`);
-    err.status = res.status;
-    err.code = code;
-    throw err;
+  const extension = path12.extname(bin);
+  const fromPath = pathValue(env2).split(";").map(cleanPathSegment).filter(Boolean).flatMap((directory) => extension ? [path12.join(directory, bin)] : [
+    path12.join(directory, `${bin}.exe`),
+    path12.join(directory, `${bin}.cmd`),
+    path12.join(directory, `${bin}.ps1`),
+    path12.join(directory, bin)
+  ]);
+  const seen = /* @__PURE__ */ new Set();
+  return [...fromPath, ...userClaudeCandidates(bin, env2)].filter((candidate) => {
+    const key = candidate.toLowerCase();
+    if (seen.has(key)) return false;
+    seen.add(key);
+    return true;
+  });
+}
+function canonicalExistingPath(candidate, exists, canonicalize) {
+  if (!exists(candidate)) return null;
+  try {
+    return canonicalize(candidate);
+  } catch {
+    return null;
   }
-  const json = await res.json();
-  const task = json && json.task ? json.task : null;
-  if (task && typeof json.deduplicated === "boolean") Object.defineProperty(task, "deduplicated", { value: json.deduplicated, enumerable: false });
-  return task;
 }
-var init_control_plane_resume = __esm({
-  "../../scripts/virtual-office/code-runner/control-plane-resume.mjs"() {
-    "use strict";
+function resolveWindowsClaudeExecutable({
+  bin = "claude",
+  env: env2 = process.env,
+  exists = existsSync8,
+  canonicalize = realpathSync
+} = {}) {
+  const requested = String(bin || "").trim();
+  if (!requested || requested.includes("\0")) {
+    throw new TypeError("Claude executable must be a non-empty path without NUL bytes");
   }
-});
-
-// ../../scripts/virtual-office/code-runner/control-plane-autonomous-admission.mjs
-function makeAutonomousDispatchAdmissionClient(req, timeoutMs, onUnauthorized = () => {
-}) {
+  for (const candidate of pathCandidates(requested, env2)) {
+    const found = canonicalExistingPath(candidate, exists, canonicalize);
+    if (!found) continue;
+    if (path12.extname(found).toLowerCase() === ".exe") return found;
+    const native = path12.join(path12.dirname(found), ...NATIVE_CLAUDE_PARTS);
+    const resolvedNative = canonicalExistingPath(native, exists, canonicalize);
+    if (resolvedNative) return resolvedNative;
+  }
+  const error = new Error(
+    `Could not resolve a native claude.exe for "${requested}". Install or update Claude Code with the native Windows installer (recommended) or npm install -g @anthropic-ai/claude-code; the HQ runner will not execute a shell-only .cmd/.ps1 shim.`
+  );
+  error.code = "ENOENT";
+  throw error;
+}
+function buildWindowsClaudeLaunch({
+  bin = "claude",
+  args = [],
+  env: env2 = process.env
+} = {}) {
   return {
-    async reserveAutonomousDispatchBudget({ requestedBudgetUsd, reservationId, occurrenceKey }) {
-      const res = await req("POST", "/api/v1/autonomous-dispatch/admission", {
-        requested_budget_usd: requestedBudgetUsd,
-        reservation_id: reservationId,
-        dispatch_occurrence_key: occurrenceKey
-      }, { timeoutMs });
-      if (res.status === 401) {
-        onUnauthorized();
-        throw new Error("autonomous dispatch admission unauthorized (401)");
-      }
-      if (!res.ok) throw new Error(`autonomous dispatch admission failed: HTTP ${res.status}`);
-      const body = await res.json();
-      return {
-        allowed: body?.allowed === true,
-        reason: typeof body?.reason === "string" ? body.reason : ""
-      };
-    },
-    async releaseAutonomousDispatchBudget(reservationId) {
-      const res = await req("POST", "/api/v1/autonomous-dispatch/reservation/release", {
-        reservation_id: reservationId
-      }, { timeoutMs });
-      if (res.status === 401) {
-        onUnauthorized();
-        throw new Error("autonomous dispatch release unauthorized (401)");
-      }
-      if (!res.ok) throw new Error(`autonomous dispatch release failed: HTTP ${res.status}`);
-      return true;
+    bin: resolveWindowsClaudeExecutable({ bin, env: env2 }),
+    args: Array.from(args, (value) => String(value)),
+    spawnOptions: {
+      shell: false,
+      windowsHide: true,
+      windowsVerbatimArguments: false
     }
   };
 }
-var init_control_plane_autonomous_admission = __esm({
-  "../../scripts/virtual-office/code-runner/control-plane-autonomous-admission.mjs"() {
-    "use strict";
-  }
-});
-
-// ../../scripts/virtual-office/code-runner/control-plane-merge.mjs
-async function mergeVerifiedPrRequest(req, prNumber, automationContext, onUnauthorized) {
-  const res = await req(
-    "POST",
-    "/api/v1/admin/pr/merge",
-    { prNumber, automationContext },
-    { timeoutMs: 12e4 }
-  );
-  if (res.status === 401) {
-    onUnauthorized();
-    throw new Error("gated merge unauthorized (401)");
+function spawnClaudeSync(args = [], options = {}) {
+  if (process.platform !== "win32") {
+    return spawnSync("claude", args, { windowsHide: true, ...options });
   }
-  const json = await res.json().catch(() => ({}));
-  if (res.ok && json?.ok === true) {
-    const result = json?.result && typeof json.result === "object" ? json.result : {};
-    const status = result.merged === true || result.status === "merged" ? "merged" : result.status === "auto-merge-enabled" || String(result.action || "").includes("auto-merge") ? "queued" : "accepted";
+  try {
+    const launch = buildWindowsClaudeLaunch({
+      bin: "claude",
+      args,
+      env: options.env || process.env
+    });
+    return spawnSync(launch.bin, launch.args, {
+      ...options,
+      ...launch.spawnOptions
+    });
+  } catch (error) {
     return {
-      status,
-      detail: typeof result.detail === "string" ? result.detail : null,
-      actionReceiptId: typeof json.action_receipt_id === "string" ? json.action_receipt_id : null
+      error,
+      status: null,
+      signal: null,
+      output: null,
+      stdout: null,
+      stderr: null
     };
   }
-  const captureStoreRetry = json?.action_status === "not_attempted" && (json?.error === "capture_preflight_unavailable" || json?.error === "decision_outcome_intent_failed");
-  if (res.status === 503 && (json?.error === "verify_unavailable" || json?.error === "merge_unavailable" || captureStoreRetry)) {
-    return { status: "retry", reason: json.reason || json.message || json.error || "verification unavailable" };
-  }
-  return {
-    status: "blocked",
-    reason: json?.reason || json?.message || json?.error || `HTTP ${res.status}`,
-    actionReceiptId: typeof json?.action_receipt_id === "string" ? json.action_receipt_id : null
-  };
 }
-var init_control_plane_merge = __esm({
-  "../../scripts/virtual-office/code-runner/control-plane-merge.mjs"() {
+var NATIVE_CLAUDE_PARTS;
+var init_windows_claude_launch = __esm({
+  "../../scripts/virtual-office/code-runner/windows-claude-launch.mjs"() {
     "use strict";
+    NATIVE_CLAUDE_PARTS = [
+      "node_modules",
+      "@anthropic-ai",
+      "claude-code",
+      "bin",
+      "claude.exe"
+    ];
   }
 });
 
-// ../../scripts/virtual-office/code-runner/control-plane-weekly-tokens.mjs
-async function postWeeklyTokensRequest(taskReq, { operatorId, runnerId, tokens, claudeWeeklyPct, claudeWeeklyResetsAt }, onUnauthorized = () => {
-}) {
-  const body = {
-    operator_id: operatorId,
-    runner_id: runnerId,
-    input_tokens: tokens.input_tokens,
-    output_tokens: tokens.output_tokens,
-    cache_creation_tokens: tokens.cache_creation_tokens,
-    cache_read_tokens: tokens.cache_read_tokens
-  };
-  if (typeof claudeWeeklyPct === "number") {
-    body.claude_weekly_pct = claudeWeeklyPct;
-  }
-  if (claudeWeeklyResetsAt !== void 0) {
-    body.claude_weekly_resets_at = claudeWeeklyResetsAt;
+// ../../scripts/virtual-office/code-runner/anthropic-key-store.mjs
+import { createRequire as createRequire2 } from "node:module";
+import { spawnSync as spawnSync2 } from "node:child_process";
+function defaultEntryCtor() {
+  if (_loadTried) return _entryCtor;
+  _loadTried = true;
+  try {
+    _entryCtor = require2("@napi-rs/keyring").Entry;
+  } catch {
+    _entryCtor = null;
   }
-  const res = await taskReq("POST", "/api/v1/weekly-tokens", body);
-  if (res.status === 401) {
-    onUnauthorized();
-    throw new Error("weekly-tokens unauthorized (401)");
+  return _entryCtor;
+}
+function getAnthropicKey({ EntryCtor = defaultEntryCtor() } = {}) {
+  if (!EntryCtor) return null;
+  try {
+    return new EntryCtor(KEY_SERVICE, KEY_ACCOUNT).getPassword() || null;
+  } catch {
+    return null;
   }
-  if (!res.ok) throw new Error(`weekly-tokens failed: HTTP ${res.status}`);
-  return true;
 }
-var init_control_plane_weekly_tokens = __esm({
-  "../../scripts/virtual-office/code-runner/control-plane-weekly-tokens.mjs"() {
-    "use strict";
+function hasAnthropicKey(opts = {}) {
+  return getAnthropicKey(opts) !== null;
+}
+function withAnthropicKey(baseEnv = {}, { getKey = getAnthropicKey, probeLogin = probeClaudeLoginState } = {}) {
+  const { source, key } = classifyClaudeCredential(baseEnv, { getKey, probeLogin });
+  const next = { ...baseEnv };
+  if (source === CLAUDE_CREDENTIAL_SOURCE.PREFER_LOGIN) {
+    delete next.ANTHROPIC_API_KEY;
+    return next;
   }
-});
-
-// ../../scripts/virtual-office/code-runner/control-plane-telemetry-relay.mjs
-async function relayTelemetryEventsRequest(req, { events, source }, onUnauthorized = () => {
-}) {
-  const res = await req("POST", "/api/v1/telemetry/relay", { events, ...source ? { source } : {} }, {
-    timeoutMs: TELEMETRY_RELAY_TIMEOUT_MS
-  });
-  if (res.status === 401) onUnauthorized();
-  let body = null;
+  if (key !== null) next.ANTHROPIC_API_KEY = key;
+  return next;
+}
+function claudeCostBasis(env2 = process.env) {
+  return String(env2.ANTHROPIC_API_KEY || "").trim() ? "vendor_billed" : "subscription_api_equivalent";
+}
+function describeAnthropicAuthSource(baseEnv = {}, { getKey = getAnthropicKey, probeLogin = probeClaudeLoginState } = {}) {
+  const { source } = classifyClaudeCredential(baseEnv, { getKey, probeLogin });
+  return AUTH_SOURCE_DESCRIPTION[source];
+}
+function augmentAuthError(summary) {
+  const s = String(summary ?? "");
+  if (!AUTH_ERROR_RE.test(s)) return s;
+  return `${s}
+\u21B3 Anthropic auth failed on the runner. The \`claude\` CLI is a SEPARATE install/login from the Claude Desktop app and the Claude Code IDE extension \u2014 signing into those does NOT authenticate it. Fix: run \`claude auth login\` (Claude subscription) on the runner machine, or clear any stale ANTHROPIC_API_KEY (env / OS keychain / .env.local) and set VO_RUNNER_PREFER_LOGIN=1 \u2014 then restart the runner. Verify with \`claude -p "say hi"\`.`;
+}
+function probeClaudeLoginState({
+  spawn: spawn5 = spawnSync2,
+  buildWindowsLaunch = buildWindowsClaudeLaunch,
+  platform: platform4 = process.platform
+} = {}) {
   try {
-    body = await res.json();
+    const launch = platform4 === "win32" ? buildWindowsLaunch({ bin: "claude", args: ["auth", "status"] }) : { bin: "claude", args: ["auth", "status"], spawnOptions: { windowsHide: true } };
+    const st = spawn5(launch.bin, launch.args, { ...launch.spawnOptions, timeout: 5e3, encoding: "utf8" });
+    const parsed = JSON.parse(String(st.stdout || "").trim() || "{}");
+    return typeof parsed.loggedIn === "boolean" ? parsed.loggedIn : null;
   } catch {
-    body = null;
+    return null;
   }
-  return { status: res.status, body };
 }
-var TELEMETRY_RELAY_TIMEOUT_MS;
-var init_control_plane_telemetry_relay = __esm({
-  "../../scripts/virtual-office/code-runner/control-plane-telemetry-relay.mjs"() {
+var require2, KEY_SERVICE, KEY_ACCOUNT, _entryCtor, _loadTried, AUTH_SOURCE_DESCRIPTION, AUTH_ERROR_RE;
+var init_anthropic_key_store = __esm({
+  "../../scripts/virtual-office/code-runner/anthropic-key-store.mjs"() {
     "use strict";
-    TELEMETRY_RELAY_TIMEOUT_MS = 3e4;
+    init_windows_claude_launch();
+    init_claude_credential_choice();
+    init_claude_credential_choice();
+    require2 = createRequire2(import.meta.url);
+    KEY_SERVICE = "algosuite-vo";
+    KEY_ACCOUNT = "anthropic-api-key";
+    _loadTried = false;
+    AUTH_SOURCE_DESCRIPTION = Object.freeze({
+      [CLAUDE_CREDENTIAL_SOURCE.PREFER_LOGIN]: "claude auth login (VO_RUNNER_PREFER_LOGIN set \u2014 any API key ignored)",
+      [CLAUDE_CREDENTIAL_SOURCE.ENV_KEY]: "ANTHROPIC_API_KEY from environment",
+      [CLAUDE_CREDENTIAL_SOURCE.NO_KEY]: "claude auth login session (no API key set)",
+      [CLAUDE_CREDENTIAL_SOURCE.KEYCHAIN_PREFER_KEY]: "ANTHROPIC_API_KEY from OS keychain (VO_RUNNER_PREFER_KEY set \u2014 subscription ignored)",
+      [CLAUDE_CREDENTIAL_SOURCE.SUBSCRIPTION_WINS]: "claude auth login session (subscription beats the stored keychain key)",
+      [CLAUDE_CREDENTIAL_SOURCE.KEYCHAIN]: "ANTHROPIC_API_KEY from OS keychain"
+    });
+    AUTH_ERROR_RE = /\b401\b|invalid[^.]{0,24}(authentication|credential)|authentication_error|unauthorized|not[ _-]?authenticated/i;
   }
 });
 
-// ../../scripts/virtual-office/code-runner/claim-gate-notice.mjs
-function describeClaimGate(gate) {
-  if (!gate || gate.allowed !== false) return null;
-  const reason = String(gate.reason || "denied");
-  const floor = gate.floor_version ? ` (floor ${gate.floor_version})` : "";
-  return `claim gate: DENIED \u2014 ${reason}${floor}: ${(Object.hasOwn(REASON_HELP, reason) ? REASON_HELP[reason] : null) ?? "the control plane refused this runner's claims"}`;
+// ../../scripts/virtual-office/code-runner/agent-auth-attestation.mjs
+function isTruthyFlag2(value) {
+  const s = String(value ?? "").trim().toLowerCase();
+  return s === "1" || s === "true" || s === "yes" || s === "on";
 }
-function makeClaimGateNotice({ log: log2 = () => {
-} } = {}) {
-  let last = null;
-  let current = null;
-  return {
-    current: () => current,
-    observe(json) {
-      const gate = json && typeof json === "object" ? json.claim_gate : null;
-      const denied = gate && gate.allowed === false ? gate : null;
-      current = denied ? { ...denied, observed_at: (/* @__PURE__ */ new Date()).toISOString() } : null;
-      const signature = denied ? `${denied.reason}|${denied.floor_version ?? ""}` : null;
-      if (signature === last) return;
-      if (denied) log2(describeClaimGate(denied));
-      else if (last !== null) log2("claim gate: allowed again \u2014 this runner may claim work");
-      last = signature;
-    }
-  };
+function runnerAllowsApiBilling(env2 = {}) {
+  return isTruthyFlag2(env2[RUNNER_ALLOW_API_BILLING_ENV]);
 }
-var REASON_HELP;
-var init_claim_gate_notice = __esm({
-  "../../scripts/virtual-office/code-runner/claim-gate-notice.mjs"() {
-    "use strict";
-    REASON_HELP = {
-      daemon_version_below_floor: "this daemon is older than the approved release target \u2014 it idles until the governed updater brings it current (operator override: VO_RUNNER_CLAIM_MIN_DAEMON_VERSION / VO_RUNNER_CLAIM_VERSION_GATE=off on the control plane)",
-      daemon_version_unreported: "this daemon reports no parseable version in its heartbeat \u2014 too old for the updater to manage, so it may not claim work",
-      no_fresh_heartbeat: "the control plane has no fresh heartbeat from this runner \u2014 claims resume once heartbeats land",
-      runner_denylisted: "this runner id is on the operator quarantine list (VO_RUNNER_CLAIM_DENYLIST)"
-    };
+function hasApiBillingCredential(env2 = {}) {
+  for (const [name, value] of Object.entries(env2)) {
+    if (!API_BILLING_ENV_NAME_SET.has(String(name).toUpperCase())) continue;
+    if (String(value ?? "").trim()) return true;
   }
-});
-
-// ../../scripts/virtual-office/code-runner/control-plane-knowledge-context.mjs
-function canonicalizeKnowledgeContextQuery(value) {
-  return typeof value === "string" ? value.trimStart().slice(0, KNOWLEDGE_CONTEXT_QUERY_MAX_CHARS) : "";
+  return false;
 }
-function isRetryableStatus(status) {
-  return status >= 500 && status <= 599;
+function stripApiBillingEnv(env2 = {}) {
+  const next = {};
+  for (const [name, value] of Object.entries(env2)) {
+    if (API_BILLING_ENV_NAME_SET.has(String(name).toUpperCase())) continue;
+    next[name] = value;
+  }
+  return next;
 }
-function defaultSleep(ms) {
-  return new Promise((resolve3) => {
-    setTimeout(resolve3, ms);
-  });
+function resolveAgentAuthSource(env2 = {}) {
+  return hasApiBillingCredential(env2) ? AGENT_AUTH_SOURCE.API_KEY : AGENT_AUTH_SOURCE.LOGIN;
 }
-async function getTaskKnowledgeContextRequest(req, taskId, { query, knowledgeRequestId } = {}, {
-  taskRequestTimeoutMs,
-  invalidateToken = () => {
-  },
-  sleep: sleep3 = defaultSleep,
-  log: log2 = () => {
-  }
-} = {}) {
-  const body = {};
-  const canonicalQuery = canonicalizeKnowledgeContextQuery(query);
-  if (canonicalQuery.trim()) body.query = canonicalQuery;
-  if (typeof knowledgeRequestId === "string" && knowledgeRequestId) body.knowledge_request_id = knowledgeRequestId;
-  const path24 = `/api/v1/code-task/${encodeURIComponent(taskId)}/knowledge-context`;
-  const timeoutMs = Math.max(Number(taskRequestTimeoutMs) || 0, MIN_KNOWLEDGE_CONTEXT_TIMEOUT_MS);
-  for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt += 1) {
-    let res;
-    let cause;
-    try {
-      res = await req("POST", path24, body, { timeoutMs });
-    } catch (err) {
-      cause = err;
-    }
-    if (!cause) {
-      if (res.status === 401) {
-        invalidateToken();
-        throw new Error("knowledge-context unauthorized (401)");
-      }
-      if (res.status === 404) return null;
-      if (res.ok) return res.json();
-      if (!isRetryableStatus(res.status)) {
-        throw new Error(`knowledge-context failed: HTTP ${res.status}`);
-      }
-      cause = new Error(`knowledge-context failed: HTTP ${res.status}`);
-    }
-    if (attempt === MAX_ATTEMPTS) throw cause;
-    const delayMs = RETRY_DELAYS_MS[attempt - 1];
-    log2(`knowledge-context attempt ${attempt}/${MAX_ATTEMPTS} failed (${cause.message}); retrying in ${delayMs}ms`);
-    await sleep3(delayMs);
+function applyApiBillingPolicy(spawnEnv = {}, { runnerEnv = spawnEnv, allowApiBilling = false } = {}) {
+  const forcedLogin = wantsLogin(runnerEnv) && !wantsKey(runnerEnv);
+  const permitted = !forcedLogin && allowApiBilling === true && runnerAllowsApiBilling(runnerEnv);
+  const env2 = permitted ? { ...spawnEnv } : stripApiBillingEnv(spawnEnv);
+  return { env: env2, agent_auth_source: resolveAgentAuthSource(env2), permitted };
+}
+function resolveRunnerAttestedAuthSource(env2 = process.env, { hasStoredKey = hasAnthropicKey } = {}) {
+  if (wantsLogin(env2) && !wantsKey(env2)) return AGENT_AUTH_SOURCE.LOGIN;
+  if (!runnerAllowsApiBilling(env2)) return AGENT_AUTH_SOURCE.LOGIN;
+  if (hasApiBillingCredential(env2)) return AGENT_AUTH_SOURCE.API_KEY;
+  try {
+    return hasStoredKey() === true ? AGENT_AUTH_SOURCE.API_KEY : AGENT_AUTH_SOURCE.LOGIN;
+  } catch {
+    return AGENT_AUTH_SOURCE.API_KEY;
   }
-  throw new Error("knowledge-context retry loop exited unexpectedly");
 }
-var MIN_KNOWLEDGE_CONTEXT_TIMEOUT_MS, KNOWLEDGE_CONTEXT_QUERY_MAX_CHARS, RETRY_DELAYS_MS, MAX_ATTEMPTS;
-var init_control_plane_knowledge_context = __esm({
-  "../../scripts/virtual-office/code-runner/control-plane-knowledge-context.mjs"() {
+function describeTaskAuthSource(env2 = process.env, task = {}) {
+  const { agent_auth_source: authSource, permitted } = applyApiBillingPolicy(env2, {
+    runnerEnv: env2,
+    allowApiBilling: task?.allow_api_billing === true
+  });
+  const reason = permitted ? "explicit_opt_in" : "default";
+  return `auth_source=${authSource} reason=${reason}`;
+}
+var AGENT_AUTH_SOURCE, AGENT_AUTH_SOURCES, API_BILLING_ENV_NAMES, RUNNER_ALLOW_API_BILLING_ENV, API_BILLING_ENV_NAME_SET;
+var init_agent_auth_attestation = __esm({
+  "../../scripts/virtual-office/code-runner/agent-auth-attestation.mjs"() {
     "use strict";
-    MIN_KNOWLEDGE_CONTEXT_TIMEOUT_MS = 15e3;
-    KNOWLEDGE_CONTEXT_QUERY_MAX_CHARS = 2e3;
-    RETRY_DELAYS_MS = [2e3, 6e3];
-    MAX_ATTEMPTS = RETRY_DELAYS_MS.length + 1;
+    init_claude_credential_choice();
+    init_anthropic_key_store();
+    AGENT_AUTH_SOURCE = Object.freeze({
+      /** A flat-cost linked account (`claude auth login`). No per-token vendor bill. */
+      LOGIN: "login",
+      /** A metered per-token credential the vendor bills. */
+      API_KEY: "api_key"
+    });
+    AGENT_AUTH_SOURCES = Object.freeze([
+      AGENT_AUTH_SOURCE.LOGIN,
+      AGENT_AUTH_SOURCE.API_KEY
+    ]);
+    API_BILLING_ENV_NAMES = Object.freeze([
+      "ANTHROPIC_API_KEY",
+      "ANTHROPIC_AUTH_TOKEN",
+      "CLAUDE_API_KEY"
+    ]);
+    RUNNER_ALLOW_API_BILLING_ENV = "VO_RUNNER_ALLOW_API_BILLING";
+    API_BILLING_ENV_NAME_SET = new Set(API_BILLING_ENV_NAMES);
   }
 });
 
-// ../../scripts/virtual-office/code-runner/control-plane-prepared-job.mjs
-function preparedJobQuery({ agent = "claude", env: env2 = {} } = {}) {
-  const params = new URLSearchParams();
-  params.set("agent", String(agent));
-  const sent = [];
-  const dropped = [];
-  for (const key of PREPARED_JOB_ENV_QUERY_KEYS) {
-    const raw = env2?.[key];
-    if (typeof raw !== "string" || raw.length === 0) continue;
-    if (raw.length > PREPARED_JOB_ENV_VALUE_MAX) {
-      dropped.push(key);
-      continue;
-    }
-    params.set(key, raw);
-    sent.push(key);
+// ../../scripts/virtual-office/code-runner/control-plane-heartbeat-body.mjs
+function buildRunnerHeartbeatBody({
+  runnerId,
+  runnerInstanceId,
+  operatorId,
+  uptimeSec,
+  activeTasks,
+  maxConcurrency,
+  effectiveConcurrency,
+  measuredTaskSlots,
+  measuredCpuSlots,
+  measuredMemorySlots,
+  version,
+  daemonVersion,
+  nodeVersion,
+  defaultAgent,
+  supervisorInstanceId,
+  supervisorVersion,
+  supervisorCapabilities,
+  servedRepos,
+  servedOperators,
+  availableAgents,
+  accountUsage,
+  availableLocalModels,
+  supportedTaskKinds,
+  hostHealth,
+  agentAuthSource,
+  prepared_job_shadow: preparedJobShadow
+} = {}) {
+  const body = { runner_id: runnerId, ...preparedJobShadow ? { prepared_job_shadow: preparedJobShadow } : {} };
+  if (runnerInstanceId) body.runner_instance_id = runnerInstanceId;
+  if (operatorId) body.operator_id = operatorId;
+  if (typeof uptimeSec === "number") body.uptime_sec = uptimeSec;
+  if (typeof activeTasks === "number") body.active_tasks = activeTasks;
+  if (typeof maxConcurrency === "number") body.max_concurrency = maxConcurrency;
+  if (typeof effectiveConcurrency === "number") body.effective_concurrency = effectiveConcurrency;
+  if (typeof measuredTaskSlots === "number") body.measured_task_slots = measuredTaskSlots;
+  if (typeof measuredCpuSlots === "number") body.measured_cpu_slots = measuredCpuSlots;
+  if (typeof measuredMemorySlots === "number") body.measured_memory_slots = measuredMemorySlots;
+  if (version) body.version = version;
+  if (daemonVersion) body.daemon_version = daemonVersion;
+  if (nodeVersion) body.node_version = nodeVersion;
+  if (defaultAgent) body.default_agent = defaultAgent;
+  if (supervisorInstanceId) body.supervisor_instance_id = supervisorInstanceId;
+  if (supervisorVersion) body.supervisor_version = supervisorVersion;
+  if (Array.isArray(supervisorCapabilities) && supervisorCapabilities.length > 0) {
+    body.supervisor_capabilities = supervisorCapabilities;
   }
-  return { query: params.toString(), sent, dropped };
-}
-async function refusalCode(res) {
-  try {
-    const body = await res.json();
-    return typeof body?.error === "string" && body.error ? body.error : null;
-  } catch {
-    return null;
+  if (Array.isArray(servedRepos) && servedRepos.length > 0) body.served_repos = servedRepos;
+  if (Array.isArray(servedOperators) && servedOperators.length > 0) {
+    body.served_operator_ids = servedOperators;
   }
-}
-async function getPreparedJobRequest(req, taskId, options = {}, invalidateToken = () => {
-}) {
-  const { agent = "claude", env: env2 = {}, timeoutMs = 15e3 } = options;
-  const { query, sent, dropped } = preparedJobQuery({ agent, env: env2 });
-  const envMeta = { envSent: sent, envDropped: dropped };
-  if (typeof taskId !== "string" || taskId.length === 0) {
-    return { ok: false, reason: "missing_task_id", status: 0, ...envMeta };
+  if (Array.isArray(availableAgents) && availableAgents.length > 0) {
+    body.available_agents = availableAgents;
   }
-  const path24 = `/api/v1/code-task/${encodeURIComponent(taskId)}/prepared-job?${query}`;
-  let res;
-  try {
-    res = await req("GET", path24, void 0, { timeoutMs });
-  } catch (err) {
-    return { ok: false, reason: `transport: ${err?.message || String(err)}`, status: 0, ...envMeta };
+  if (Array.isArray(accountUsage) && accountUsage.length > 0) {
+    body.account_usage = accountUsage;
   }
-  if (res?.status === 401) {
-    try {
-      invalidateToken();
-    } catch {
-    }
-    return { ok: false, reason: "unauthorized", status: 401, ...envMeta };
+  if (Array.isArray(availableLocalModels) && availableLocalModels.length > 0) {
+    body.available_local_models = availableLocalModels;
   }
-  if (!res?.ok) {
-    const code = await refusalCode(res);
-    return { ok: false, reason: code || `http_${res?.status ?? "unknown"}`, status: res?.status ?? 0, ...envMeta };
+  if (Array.isArray(supportedTaskKinds) && supportedTaskKinds.length > 0) {
+    body.supported_task_kinds = supportedTaskKinds;
   }
-  let body;
-  try {
-    body = await res.json();
-  } catch (err) {
-    return { ok: false, reason: `unreadable_body: ${err?.message || String(err)}`, status: res.status, ...envMeta };
+  if (hostHealth && typeof hostHealth === "object") body.host_health = hostHealth;
+  if (AGENT_AUTH_SOURCES.includes(agentAuthSource)) body.agent_auth_source = agentAuthSource;
+  return body;
+}
+var init_control_plane_heartbeat_body = __esm({
+  "../../scripts/virtual-office/code-runner/control-plane-heartbeat-body.mjs"() {
+    "use strict";
+    init_agent_auth_attestation();
   }
-  const job = body?.prepared_job;
-  if (!job || typeof job !== "object") {
-    return { ok: false, reason: "no_prepared_job_in_body", status: res.status, ...envMeta };
+});
+
+// ../../scripts/virtual-office/code-runner/control-plane-promote.mjs
+async function promoteDraftPrRequest(req, prNumber, automationContext, onUnauthorized = () => {
+}) {
+  const res = await req("POST", "/api/v1/admin/pr/promote-draft", { prNumber, automationContext }, { timeoutMs: 6e4 });
+  if (res.status === 401) {
+    onUnauthorized();
+    throw new Error("promote-draft unauthorized (401)");
   }
-  return {
-    ok: true,
-    job,
-    composition: body?.composition && typeof body.composition === "object" ? body.composition : {},
-    ...envMeta
-  };
+  const json = await res.json().catch(() => ({}));
+  if (res.ok && json?.ok === true) {
+    return {
+      status: json.promoted === true ? json.auto_merge_disarmed === true ? "promoted (auto-merge disarmed)" : "promoted" : json.already_ready === true ? "already_ready" : "unchanged",
+      headSha: typeof json.head_sha === "string" ? json.head_sha : null,
+      reason: typeof json.blocked_reason === "string" ? json.blocked_reason : null
+    };
+  }
+  const code = typeof json?.error === "string" ? json.error : null;
+  const err = new Error(`promote-draft failed: HTTP ${res.status}${code ? ` (${code})` : ""}${json?.reason ? ` \u2014 ${json.reason}` : ""}`);
+  err.status = res.status;
+  err.code = code;
+  throw err;
 }
-var PREPARED_JOB_ENV_QUERY_KEYS, PREPARED_JOB_ENV_VALUE_MAX;
-var init_control_plane_prepared_job = __esm({
-  "../../scripts/virtual-office/code-runner/control-plane-prepared-job.mjs"() {
+var init_control_plane_promote = __esm({
+  "../../scripts/virtual-office/code-runner/control-plane-promote.mjs"() {
     "use strict";
-    PREPARED_JOB_ENV_QUERY_KEYS = [
-      "VO_CODE_RUNNER_NO_WEB",
-      "VO_CODE_RUNNER_NO_WORKFLOW",
-      "VO_CODE_RUNNER_NO_CONSENSUS",
-      "VO_CODE_RUNNER_PERMISSION_MODE",
-      "VO_CODE_RUNNER_DEFAULT_BUDGET_USD",
-      "VO_CODE_RUNNER_META_REASONING_EFFORT",
-      "VO_CODE_RUNNER_ALLOW_MISSING_KNOWLEDGE_CONTEXT",
-      "VO_ENABLE_CONTEXT7"
-    ];
-    PREPARED_JOB_ENV_VALUE_MAX = 64;
   }
 });
 
-// src/runner/control-plane-auth-stub.mjs
-var control_plane_auth_stub_exports = {};
-__export(control_plane_auth_stub_exports, {
-  getFirebaseAuth: () => getFirebaseAuth
-});
-async function getFirebaseAuth() {
-  throw new Error(
-    "vo-mcp runner: no control-plane credential. Run `vo-mcp login` first \u2014 the runner authenticates with your stored vo_credential (or set VO_CONTROL_PLANE_ADMIN_TOKEN)."
-  );
+// ../../scripts/virtual-office/code-runner/control-plane-task-list.mjs
+async function listAllPrOpenedTasks(request) {
+  const tasks = [];
+  let beforeCreatedAt = "";
+  let beforeId = "";
+  for (; ; ) {
+    const params = new URLSearchParams({
+      status: "pr_opened",
+      limit: String(PAGE_SIZE),
+      runner_adoption: "1"
+    });
+    if (beforeCreatedAt) {
+      params.set("before_created_at", beforeCreatedAt);
+      params.set("before_id", beforeId);
+    }
+    const res = await request("GET", `/api/v1/code-task?${params}`);
+    if (!res.ok) throw new Error(`listPrOpenedTasks failed: HTTP ${res.status}`);
+    const json = await res.json();
+    const page = Array.isArray(json?.tasks) ? json.tasks : [];
+    tasks.push(...page);
+    if (page.length < PAGE_SIZE) return tasks;
+    const last = page.at(-1);
+    if (!last?.created_at || !last?.code_task_id) {
+      throw new Error("listPrOpenedTasks pagination cursor missing");
+    }
+    beforeCreatedAt = last.created_at;
+    beforeId = last.code_task_id;
+  }
 }
-var init_control_plane_auth_stub = __esm({
-  "src/runner/control-plane-auth-stub.mjs"() {
+var PAGE_SIZE;
+var init_control_plane_task_list = __esm({
+  "../../scripts/virtual-office/code-runner/control-plane-task-list.mjs"() {
+    "use strict";
+    PAGE_SIZE = 500;
   }
 });
 
-// ../../scripts/virtual-office/code-runner/control-plane-client.mjs
-async function resolveBearer(env2) {
-  const adminToken = env2.VO_CONTROL_PLANE_ADMIN_TOKEN;
-  if (adminToken) return adminToken;
-  if (cachedFirebaseToken) return cachedFirebaseToken;
-  const { getFirebaseAuth: getFirebaseAuth2 } = await Promise.resolve().then(() => (init_control_plane_auth_stub(), control_plane_auth_stub_exports));
-  const auth = await getFirebaseAuth2({ env: env2 });
-  if (!auth || !auth.idToken) {
-    throw new Error(
-      "no control-plane credential: set VO_CONTROL_PLANE_ADMIN_TOKEN, or SMOKE_EMAIL/SMOKE_PASSWORD/SMOKE_API_KEY"
-    );
+// ../../scripts/virtual-office/code-runner/control-plane-resume.mjs
+async function resumeCodeTaskRequest(req, taskId, { automaticRateLimit = false, automaticContinuation = false } = {}, onUnauthorized = () => {
+}) {
+  const res = await req(
+    "POST",
+    `/api/v1/code-task/${encodeURIComponent(taskId)}/resume`,
+    automaticRateLimit ? { automatic_rate_limit: true } : automaticContinuation ? { automatic_continuation: true } : {}
+  );
+  if (res.status === 401) {
+    onUnauthorized();
+    throw new Error("resume unauthorized (401)");
   }
-  cachedFirebaseToken = auth.idToken;
-  return cachedFirebaseToken;
-}
-function createControlPlaneClient({
-  baseUrl,
-  env: env2 = process.env,
-  fetchImpl = fetch,
-  heartbeatTimeoutMs = Math.min(
-    Math.max(Number(env2.VO_CODE_RUNNER_HEARTBEAT_TIMEOUT_MS) || 15e3, 1e3),
-    6e4
-  ),
-  taskRequestTimeoutMs = Math.min(
-    Math.max(Number(env2.VO_CODE_RUNNER_TASK_REQUEST_TIMEOUT_MS) || 5e3, 100),
-    6e4
-  ),
-  runnerId,
-  runnerInstanceId,
-  sleep: sleep3
-} = {}) {
-  const resolvedBaseUrl = baseUrl ?? env2.VO_CONTROL_PLANE_URL ?? "";
-  if (!resolvedBaseUrl) throw new Error("VO_CONTROL_PLANE_URL is required for the code-runner daemon");
-  const root = resolvedBaseUrl.replace(/\/+$/, "");
-  const claimOccurrences = /* @__PURE__ */ new Map();
-  async function req(method, path24, body, { timeoutMs } = {}) {
-    const bearer = await resolveBearer(env2);
-    const controller = timeoutMs ? new AbortController() : null;
-    let timeoutId;
-    const request = Promise.resolve(fetchImpl(`${root}${path24}`, {
-      method,
-      headers: {
-        "content-type": "application/json",
-        authorization: `Bearer ${bearer}`
-      },
-      body: body === void 0 ? void 0 : JSON.stringify(body),
-      ...controller ? { signal: controller.signal } : {}
-    }));
-    if (!timeoutMs) return request;
-    const timeout = new Promise((_, reject) => {
-      timeoutId = setTimeout(() => {
-        controller.abort();
-        reject(new Error(`control-plane ${path24} timed out after ${timeoutMs}ms`));
-      }, timeoutMs);
-    });
+  if (!res.ok) {
+    let code = null;
     try {
-      return await Promise.race([request, timeout]);
-    } finally {
-      clearTimeout(timeoutId);
+      const body = await res.json();
+      code = typeof body?.error === "string" ? body.error : null;
+    } catch {
     }
+    const err = new Error(`resume failed: HTTP ${res.status}${code ? ` (${code})` : ""}`);
+    err.status = res.status;
+    err.code = code;
+    throw err;
   }
-  const taskReq = (method, path24, body, options = {}) => req(method, path24, body, { timeoutMs: taskRequestTimeoutMs, ...options });
-  const claimGate = makeClaimGateNotice({ log: (m) => console.warn(`[code-runner ${(/* @__PURE__ */ new Date()).toISOString()}] ${m}`) });
+  const json = await res.json();
+  const task = json && json.task ? json.task : null;
+  if (task && typeof json.deduplicated === "boolean") Object.defineProperty(task, "deduplicated", { value: json.deduplicated, enumerable: false });
+  return task;
+}
+var init_control_plane_resume = __esm({
+  "../../scripts/virtual-office/code-runner/control-plane-resume.mjs"() {
+    "use strict";
+  }
+});
+
+// ../../scripts/virtual-office/code-runner/control-plane-autonomous-admission.mjs
+function makeAutonomousDispatchAdmissionClient(req, timeoutMs, onUnauthorized = () => {
+}) {
   return {
-    getClaimGate: () => claimGate.current(),
-    // last DENIED claim-gate verdict (null when allowed) — for /status + tests
-    ...makeAutonomousDispatchAdmissionClient(
-      req,
-      taskRequestTimeoutMs,
-      () => {
-        cachedFirebaseToken = null;
-      }
-    ),
-    /**
-     * Claim the next pending task. Returns the task or null (empty queue).
-     * `repos` (optional `owner/name` list) and `operatorIds` (optional
-     * `operator_id` list) scope the claim so this daemon only picks up tasks it
-     * serves — the control-plane filters by both (logical AND), so another
-     * operator's task never lands on (or bills) this machine.
-     */
-    async claim(runnerId2, repos, operatorIds, session = {}) {
-      const body = { runner_id: runnerId2 };
-      if (Array.isArray(repos) && repos.length > 0) body.repos = repos;
-      if (Array.isArray(operatorIds) && operatorIds.length > 0) body.operator_ids = operatorIds;
-      if (session.runnerInstanceId) {
-        body.runner_instance_id = session.runnerInstanceId;
-        body.runner_progress_protocol_version = 2;
-      }
-      if (session.runnerInstanceId && session.reconcileStale) body.reconcile_stale = true;
-      if (session.defaultAgent) body.default_agent = session.defaultAgent;
-      if (Array.isArray(session.availableAgents)) {
-        body.available_agents = session.availableAgents.filter((entry) => entry?.installed === true && entry?.authenticated === true).map((entry) => entry.agent);
-      }
-      const res = await taskReq("POST", "/api/v1/code-task/claim", body);
+    async reserveAutonomousDispatchBudget({ requestedBudgetUsd, reservationId, occurrenceKey }) {
+      const res = await req("POST", "/api/v1/autonomous-dispatch/admission", {
+        requested_budget_usd: requestedBudgetUsd,
+        reservation_id: reservationId,
+        dispatch_occurrence_key: occurrenceKey
+      }, { timeoutMs });
       if (res.status === 401) {
-        cachedFirebaseToken = null;
-        throw new Error("claim unauthorized (401)");
+        onUnauthorized();
+        throw new Error("autonomous dispatch admission unauthorized (401)");
       }
-      if (!res.ok) throw new Error(`claim failed: HTTP ${res.status}`);
-      const json = await res.json();
-      claimGate.observe(json);
-      const task = json && json.task ? json.task : null;
-      if (task?.claim_occurrence_id) claimOccurrences.set(task.code_task_id, task.claim_occurrence_id);
-      return task;
+      if (!res.ok) throw new Error(`autonomous dispatch admission failed: HTTP ${res.status}`);
+      const body = await res.json();
+      return {
+        allowed: body?.allowed === true,
+        reason: typeof body?.reason === "string" ? body.reason : ""
+      };
     },
-    /**
-     * Enqueue a new code-task (used by the PR watcher to auto-dispatch a CI fix).
-     * Server derives operator/tenant from the daemon's authenticated principal.
-     * Returns the created task, or throws on a non-2xx response.
-     */
-    async enqueueCodeTask({ repo, prompt, max_budget_usd, max_turns, dispatch_mode, tier, agent, model, dispatch_occurrence_key, autonomous_reservation_id, on_behalf_of_operator_id, repair_pr_number, repair_kind, repair_head_sha, repair_chain }) {
-      const body = { repo, prompt };
-      if (typeof max_budget_usd === "number") body.max_budget_usd = max_budget_usd;
-      if (typeof max_turns === "number") body.max_turns = max_turns;
-      for (const [key, value] of Object.entries({ dispatch_mode, tier, agent, model, repair_kind, repair_head_sha })) {
-        if (value) body[key] = value;
-      }
-      if (dispatch_occurrence_key) body.dispatch_occurrence_key = dispatch_occurrence_key;
-      if (autonomous_reservation_id) body.autonomous_reservation_id = autonomous_reservation_id;
-      if (on_behalf_of_operator_id) body.on_behalf_of_operator_id = on_behalf_of_operator_id;
-      if (Number.isInteger(repair_pr_number) && repair_pr_number > 0) body.repair_pr_number = repair_pr_number;
-      if (repair_chain) body.repair_chain = repair_chain;
-      const res = await taskReq("POST", "/api/v1/code-task", body);
+    async releaseAutonomousDispatchBudget(reservationId) {
+      const res = await req("POST", "/api/v1/autonomous-dispatch/reservation/release", {
+        reservation_id: reservationId
+      }, { timeoutMs });
       if (res.status === 401) {
-        cachedFirebaseToken = null;
-        throw new Error("enqueue unauthorized (401)");
-      }
-      if (!res.ok) {
-        let code = null;
-        try {
-          const errBody = await res.json();
-          code = typeof errBody?.error === "string" ? errBody.error : null;
-        } catch {
-        }
-        const err = new Error(`enqueue failed: HTTP ${res.status}${code ? ` (${code})` : ""}`);
-        err.status = res.status;
-        err.code = code;
-        throw err;
-      }
-      const json = await res.json();
-      const task = json && json.task ? json.task : null;
-      if (task && typeof json.deduplicated === "boolean") Object.defineProperty(task, "deduplicated", { value: json.deduplicated, enumerable: false });
-      return task;
-    },
-    /**
-     * Resume a failed/cancelled/max-turn partial code-task. The PR watcher uses
-     * this after the runner opens a partial draft PR and CI is no longer pending.
-     */
-    async resumeCodeTask(taskId, { automaticRateLimit = false, automaticContinuation = false } = {}) {
-      return resumeCodeTaskRequest(taskReq, taskId, { automaticRateLimit, automaticContinuation }, () => {
-        cachedFirebaseToken = null;
-      });
-    },
-    /**
-     * Send a CI-green PR through the production verify-before-act merge route.
-     * The server inspects the current diff, applies deterministic blockers, runs
-     * consensus, records a receipt, and direct-merges only the inspected SHA.
-     */
-    /** F35: promote a PARTIAL draft to READY via the plane (admin-only; server re-checks; never merges). */
-    promoteDraftPr: (prNumber, automationContext) => promoteDraftPrRequest(req, prNumber, automationContext, () => {
-      cachedFirebaseToken = null;
-    }),
-    async mergeVerifiedPr(prNumber, automationContext) {
-      return mergeVerifiedPrRequest(
-        req,
-        prNumber,
-        automationContext,
-        () => {
-          cachedFirebaseToken = null;
-        }
-      );
-    },
-    async postProgress(taskId, patch) {
-      const progress = {
-        ...patch,
-        ...patch.runner_id ? {} : runnerId ? { runner_id: runnerId } : {},
-        ...patch.runner_instance_id ? {} : runnerInstanceId ? { runner_instance_id: runnerInstanceId } : {},
-        ...patch.claim_occurrence_id ? {} : claimOccurrences.has(taskId) ? { claim_occurrence_id: claimOccurrences.get(taskId) } : {}
-      };
-      const res = await taskReq("PATCH", `/api/v1/code-task/${taskId}/progress`, progress);
-      if (res.status === 409) {
-        const conflict = await res.json().catch(() => ({}));
-        if (conflict?.error === "code_task_claim_authority_changed") {
-          throw new ClaimAuthorityChangedError();
-        }
-        return { terminal: true };
-      }
-      if (res.status === 404) return { terminal: true, missing: true };
-      if (!res.ok) throw new Error(`progress failed: HTTP ${res.status}`);
-      const json = await res.json();
-      return { task: json && json.task };
-    },
-    async getTask(taskId) {
-      const res = await taskReq("GET", `/api/v1/code-task/${taskId}`);
-      if (res.status === 404) return null;
-      if (!res.ok) throw new Error(`getTask failed: HTTP ${res.status}`);
-      const json = await res.json();
-      return json ? json.task : null;
-    },
-    async getAssignedSkill(task) {
-      const name = task?.skill_invocation?.skill;
-      if (!runnerId || !runnerInstanceId || task?.claimed_by !== runnerId || task?.runner_instance_id !== runnerInstanceId || !task?.claim_occurrence_id || !name) {
-        throw new ClaimAuthorityChangedError();
-      }
-      const res = await taskReq("POST", `/api/v1/code-task/${encodeURIComponent(task.code_task_id)}/assigned-skill`, {
-        runner_id: runnerId,
-        runner_instance_id: runnerInstanceId,
-        claim_occurrence_id: task.claim_occurrence_id,
-        skill: name
-      });
-      if (res.status === 401) {
-        cachedFirebaseToken = null;
-        throw new Error("skill corpus unauthorized (401)");
-      }
-      if (res.status === 409) {
-        const conflict = await res.json().catch(() => ({}));
-        if (conflict?.error === "code_task_claim_authority_changed") {
-          throw new ClaimAuthorityChangedError();
-        }
-      }
-      if (res.status === 404) throw new Error(`skill not found: ${name}`);
-      if (!res.ok) throw new Error(`skill corpus failed: HTTP ${res.status}`);
-      const json = await res.json();
-      if (json?.corpus_available !== true || !json.skill) {
-        throw new Error(`skill corpus unavailable: ${String(json?.reason || "unknown")}`);
-      }
-      return json.skill;
-    },
-    async listPrOpenedTasks() {
-      return listAllPrOpenedTasks(taskReq);
-    },
-    async downloadTaskAttachment(taskId, attachmentId) {
-      const path24 = `/api/v1/code-task/${encodeURIComponent(taskId)}/attachment/${encodeURIComponent(attachmentId)}`;
-      const res = await taskReq("GET", path24);
-      if (res.status === 401) cachedFirebaseToken = null;
-      if (!res.ok) throw new Error(`attachment download failed: HTTP ${res.status}`);
-      return Buffer.from(await res.arrayBuffer());
-    },
-    // Raised per-attempt timeout (>=15s) + bounded retry — see control-plane-knowledge-context.mjs.
-    async getTaskKnowledgeContext(taskId, { query, knowledgeRequestId } = {}) {
-      return getTaskKnowledgeContextRequest(req, taskId, { query, knowledgeRequestId }, {
-        taskRequestTimeoutMs,
-        invalidateToken: () => {
-          cachedFirebaseToken = null;
-        },
-        sleep: sleep3,
-        log: (m) => console.warn(`[code-runner ${(/* @__PURE__ */ new Date()).toISOString()}] ${m}`)
-      });
-    },
-    /** ADR-004 § 11.1b: the plane's prepared job, for SHADOW comparison. Never throws. */
-    getPreparedJob: (taskId, options) => getPreparedJobRequest(req, taskId, options, () => {
-      cachedFirebaseToken = null;
-    }),
-    /** Weekly Claude token usage report — see control-plane-weekly-tokens.mjs. */
-    async postWeeklyTokens(report) {
-      return postWeeklyTokensRequest(taskReq, report, () => {
-        cachedFirebaseToken = null;
-      });
-    },
-    /**
-     * Relay a batch of this machine's local vo-mcp events to vo-telemetry via
-     * the control plane (telemetry-forwarder.mjs). Returns { status, body };
-     * the forwarder owns backoff/disable policy. See control-plane-telemetry-relay.mjs.
-     */
-    async relayTelemetryEvents(batch) {
-      return relayTelemetryEventsRequest(req, batch, () => {
-        cachedFirebaseToken = null;
-      });
-    },
-    /**
-     * Send a liveness heartbeat (M2). The control-plane upserts it under the
-     * authenticated operator so the web shows a TRUE "runner online" signal.
-     * Best-effort caller; throws on 401/non-ok so the daemon can log + retry.
-     */
-    async postHeartbeat(heartbeat) {
-      const body = buildRunnerHeartbeatBody(heartbeat);
-      const res = await req("POST", "/api/v1/runner/heartbeat", body, {
-        timeoutMs: heartbeatTimeoutMs
-      });
-      if (res.status === 401) {
-        cachedFirebaseToken = null;
-        throw new Error("heartbeat unauthorized (401)");
-      }
-      if (!res.ok) {
-        let detail = "";
-        try {
-          const body2 = await res.json();
-          if (Array.isArray(body2?.issue_paths) && body2.issue_paths.length > 0) {
-            detail = ` (rejected fields: ${body2.issue_paths.join(", ")})`;
-          }
-        } catch {
-        }
-        throw new Error(`heartbeat failed: HTTP ${res.status}${detail}`);
-      }
-      return res.json();
-    },
-    async getRunnerStatus({ operatorId } = {}) {
-      const query = operatorId ? `?operator_id=${encodeURIComponent(operatorId)}` : "";
-      const res = await req("GET", `/api/v1/runner/status${query}`, void 0, {
-        timeoutMs: heartbeatTimeoutMs
-      });
-      if (res.status === 401) {
-        cachedFirebaseToken = null;
-        throw new Error("runner status unauthorized (401)");
-      }
-      if (!res.ok) throw new Error(`runner status failed: HTTP ${res.status}`);
-      const body = await res.json();
-      return Array.isArray(body?.runners) ? body.runners : [];
-    },
-    async pollRunnerControl({ runnerId: runnerId2, operatorId, supervisorInstanceId, supervisorVersion, capabilities }) {
-      const body = { runner_id: runnerId2 };
-      if (operatorId) body.operator_id = operatorId;
-      if (supervisorInstanceId) body.supervisor_instance_id = supervisorInstanceId;
-      if (supervisorVersion) body.supervisor_version = supervisorVersion;
-      if (Array.isArray(capabilities) && capabilities.length > 0) body.capabilities = capabilities;
-      const res = await taskReq("POST", "/api/v1/runner/control/poll", body);
-      if (res.status === 401) {
-        cachedFirebaseToken = null;
-        throw new Error("runner control poll unauthorized (401)");
-      }
-      if (!res.ok) throw new Error(`runner control poll failed: HTTP ${res.status}`);
-      const json = await res.json();
-      const action = json?.action;
-      return action && typeof action.action_id === "string" && action.action_id ? { ...action, actionId: action.action_id } : null;
-    },
-    async completeRunnerControl(actionId, { runnerId: runnerId2, operatorId, supervisorInstanceId, supervisorVersion, capabilities, status, detail }) {
-      const body = { runner_id: runnerId2, status };
-      if (operatorId) body.operator_id = operatorId;
-      if (supervisorInstanceId) body.supervisor_instance_id = supervisorInstanceId;
-      if (supervisorVersion) body.supervisor_version = supervisorVersion;
-      if (Array.isArray(capabilities) && capabilities.length > 0) body.capabilities = capabilities;
-      if (detail) body.detail = detail;
-      const res = await taskReq("POST", `/api/v1/runner/control/${encodeURIComponent(actionId)}/complete`, body);
-      if (res.status === 401) {
-        cachedFirebaseToken = null;
-        throw new Error("runner control completion unauthorized (401)");
-      }
-      if (!res.ok) throw new Error(`runner control completion failed: HTTP ${res.status}`);
-      const json = await res.json();
-      return json?.action || null;
-    },
-    /** Mint a GitHub App installation token — see installation-token.mjs. */
-    async getInstallationToken({ required = false, readOnly = false, repo = null } = {}) {
-      return fetchInstallationToken({ req: taskReq, required, readOnly, repo });
-    },
-    /**
-     * Read the operator's dispatch-mode config (Fast→Ultracode effort setting).
-     * Returns the mode string ('fast'|'standard'|'deep'|'ultra'|'marathon'; 'ultracode' legacy),
-     * defaulting to 'standard' on any error. Never throws — best-effort.
-     */
-    async getDispatchMode() {
-      try {
-        const res = await taskReq("GET", "/api/v1/dispatch-mode-config");
-        if (!res.ok) return "standard";
-        const json = await res.json();
-        return json?.dispatchMode || "standard";
-      } catch {
-        return "standard";
+        onUnauthorized();
+        throw new Error("autonomous dispatch release unauthorized (401)");
       }
+      if (!res.ok) throw new Error(`autonomous dispatch release failed: HTTP ${res.status}`);
+      return true;
     }
   };
 }
-var cachedFirebaseToken, ClaimAuthorityChangedError;
-var init_control_plane_client = __esm({
-  "../../scripts/virtual-office/code-runner/control-plane-client.mjs"() {
+var init_control_plane_autonomous_admission = __esm({
+  "../../scripts/virtual-office/code-runner/control-plane-autonomous-admission.mjs"() {
     "use strict";
-    init_installation_token();
-    init_control_plane_heartbeat_body();
-    init_control_plane_promote();
-    init_control_plane_task_list();
-    init_control_plane_resume();
-    init_control_plane_autonomous_admission();
-    init_control_plane_merge();
-    init_control_plane_weekly_tokens();
-    init_control_plane_telemetry_relay();
-    init_claim_gate_notice();
-    init_control_plane_knowledge_context();
-    init_control_plane_prepared_job();
-    cachedFirebaseToken = null;
-    ClaimAuthorityChangedError = class extends Error {
-      constructor() {
-        super("code-task claim authority changed");
-        this.name = "ClaimAuthorityChangedError";
-        this.code = "code_task_claim_authority_changed";
-      }
-    };
   }
 });
 
-// ../../scripts/virtual-office/code-runner/windows-claude-launch.mjs
-import { existsSync as existsSync8, realpathSync } from "node:fs";
-import { win32 as path12 } from "node:path";
-import { spawnSync } from "node:child_process";
-function pathValue(env2) {
-  for (const key of ["Path", "PATH", "path"]) {
-    if (typeof env2?.[key] === "string") return env2[key];
+// ../../scripts/virtual-office/code-runner/control-plane-merge.mjs
+async function mergeVerifiedPrRequest(req, prNumber, automationContext, onUnauthorized) {
+  const res = await req(
+    "POST",
+    "/api/v1/admin/pr/merge",
+    { prNumber, automationContext },
+    { timeoutMs: 12e4 }
+  );
+  if (res.status === 401) {
+    onUnauthorized();
+    throw new Error("gated merge unauthorized (401)");
   }
-  return "";
-}
-function cleanPathSegment(value) {
-  const trimmed = String(value || "").trim();
-  return trimmed.startsWith('"') && trimmed.endsWith('"') ? trimmed.slice(1, -1) : trimmed;
-}
-function envValue(env2, name) {
-  const exact = env2?.[name];
-  if (typeof exact === "string") return exact.trim();
-  const key = Object.keys(env2 || {}).find((candidate) => candidate.toLowerCase() === name.toLowerCase());
-  return typeof env2?.[key] === "string" ? env2[key].trim() : "";
+  const json = await res.json().catch(() => ({}));
+  if (res.ok && json?.ok === true) {
+    const result = json?.result && typeof json.result === "object" ? json.result : {};
+    const status = result.merged === true || result.status === "merged" ? "merged" : result.status === "auto-merge-enabled" || String(result.action || "").includes("auto-merge") ? "queued" : "accepted";
+    return {
+      status,
+      detail: typeof result.detail === "string" ? result.detail : null,
+      actionReceiptId: typeof json.action_receipt_id === "string" ? json.action_receipt_id : null
+    };
+  }
+  const captureStoreRetry = json?.action_status === "not_attempted" && (json?.error === "capture_preflight_unavailable" || json?.error === "decision_outcome_intent_failed");
+  if (res.status === 503 && (json?.error === "verify_unavailable" || json?.error === "merge_unavailable" || captureStoreRetry)) {
+    return { status: "retry", reason: json.reason || json.message || json.error || "verification unavailable" };
+  }
+  return {
+    status: "blocked",
+    reason: json?.reason || json?.message || json?.error || `HTTP ${res.status}`,
+    actionReceiptId: typeof json?.action_receipt_id === "string" ? json.action_receipt_id : null
+  };
 }
-function userClaudeCandidates(bin, env2) {
-  if (!/^claude(?:\.(?:exe|cmd|ps1))?$/iu.test(bin)) return [];
-  const userProfile = envValue(env2, "USERPROFILE");
-  const appData = envValue(env2, "APPDATA") || (userProfile ? path12.join(userProfile, "AppData", "Roaming") : "");
-  const localAppData = envValue(env2, "LOCALAPPDATA") || (userProfile ? path12.join(userProfile, "AppData", "Local") : "");
-  const candidates = [];
-  if (appData) {
-    const npmBin = path12.join(appData, "npm");
-    candidates.push(
-      path12.join(npmBin, "claude.exe"),
-      path12.join(npmBin, "claude.cmd"),
-      path12.join(npmBin, "claude.ps1"),
-      path12.join(npmBin, "claude"),
-      path12.join(npmBin, ...NATIVE_CLAUDE_PARTS)
-    );
+var init_control_plane_merge = __esm({
+  "../../scripts/virtual-office/code-runner/control-plane-merge.mjs"() {
+    "use strict";
   }
-  if (userProfile) candidates.push(path12.join(userProfile, ".local", "bin", "claude.exe"));
-  if (localAppData) {
-    candidates.push(
-      path12.join(localAppData, "Microsoft", "WinGet", "Links", "claude.exe"),
-      path12.join(localAppData, "Microsoft", "WindowsApps", "claude.exe")
-    );
+});
+
+// ../../scripts/virtual-office/code-runner/control-plane-weekly-tokens.mjs
+async function postWeeklyTokensRequest(taskReq, { operatorId, runnerId, tokens, claudeWeeklyPct, claudeWeeklyResetsAt }, onUnauthorized = () => {
+}) {
+  const body = {
+    operator_id: operatorId,
+    runner_id: runnerId,
+    input_tokens: tokens.input_tokens,
+    output_tokens: tokens.output_tokens,
+    cache_creation_tokens: tokens.cache_creation_tokens,
+    cache_read_tokens: tokens.cache_read_tokens
+  };
+  if (typeof claudeWeeklyPct === "number") {
+    body.claude_weekly_pct = claudeWeeklyPct;
   }
-  return candidates;
+  if (claudeWeeklyResetsAt !== void 0) {
+    body.claude_weekly_resets_at = claudeWeeklyResetsAt;
+  }
+  const res = await taskReq("POST", "/api/v1/weekly-tokens", body);
+  if (res.status === 401) {
+    onUnauthorized();
+    throw new Error("weekly-tokens unauthorized (401)");
+  }
+  if (!res.ok) throw new Error(`weekly-tokens failed: HTTP ${res.status}`);
+  return true;
 }
-function pathCandidates(bin, env2) {
-  if (path12.isAbsolute(bin) || /[\\/]/u.test(bin)) {
-    return [path12.resolve(bin)];
+var init_control_plane_weekly_tokens = __esm({
+  "../../scripts/virtual-office/code-runner/control-plane-weekly-tokens.mjs"() {
+    "use strict";
   }
-  const extension = path12.extname(bin);
-  const fromPath = pathValue(env2).split(";").map(cleanPathSegment).filter(Boolean).flatMap((directory) => extension ? [path12.join(directory, bin)] : [
-    path12.join(directory, `${bin}.exe`),
-    path12.join(directory, `${bin}.cmd`),
-    path12.join(directory, `${bin}.ps1`),
-    path12.join(directory, bin)
-  ]);
-  const seen = /* @__PURE__ */ new Set();
-  return [...fromPath, ...userClaudeCandidates(bin, env2)].filter((candidate) => {
-    const key = candidate.toLowerCase();
-    if (seen.has(key)) return false;
-    seen.add(key);
-    return true;
+});
+
+// ../../scripts/virtual-office/code-runner/control-plane-telemetry-relay.mjs
+async function relayTelemetryEventsRequest(req, { events, source }, onUnauthorized = () => {
+}) {
+  const res = await req("POST", "/api/v1/telemetry/relay", { events, ...source ? { source } : {} }, {
+    timeoutMs: TELEMETRY_RELAY_TIMEOUT_MS
   });
-}
-function canonicalExistingPath(candidate, exists, canonicalize) {
-  if (!exists(candidate)) return null;
+  if (res.status === 401) onUnauthorized();
+  let body = null;
   try {
-    return canonicalize(candidate);
+    body = await res.json();
   } catch {
-    return null;
+    body = null;
   }
+  return { status: res.status, body };
 }
-function resolveWindowsClaudeExecutable({
-  bin = "claude",
-  env: env2 = process.env,
-  exists = existsSync8,
-  canonicalize = realpathSync
-} = {}) {
-  const requested = String(bin || "").trim();
-  if (!requested || requested.includes("\0")) {
-    throw new TypeError("Claude executable must be a non-empty path without NUL bytes");
-  }
-  for (const candidate of pathCandidates(requested, env2)) {
-    const found = canonicalExistingPath(candidate, exists, canonicalize);
-    if (!found) continue;
-    if (path12.extname(found).toLowerCase() === ".exe") return found;
-    const native = path12.join(path12.dirname(found), ...NATIVE_CLAUDE_PARTS);
-    const resolvedNative = canonicalExistingPath(native, exists, canonicalize);
-    if (resolvedNative) return resolvedNative;
+var TELEMETRY_RELAY_TIMEOUT_MS;
+var init_control_plane_telemetry_relay = __esm({
+  "../../scripts/virtual-office/code-runner/control-plane-telemetry-relay.mjs"() {
+    "use strict";
+    TELEMETRY_RELAY_TIMEOUT_MS = 3e4;
   }
-  const error = new Error(
-    `Could not resolve a native claude.exe for "${requested}". Install or update Claude Code with the native Windows installer (recommended) or npm install -g @anthropic-ai/claude-code; the HQ runner will not execute a shell-only .cmd/.ps1 shim.`
-  );
-  error.code = "ENOENT";
-  throw error;
+});
+
+// ../../scripts/virtual-office/code-runner/claim-gate-notice.mjs
+function describeClaimGate(gate) {
+  if (!gate || gate.allowed !== false) return null;
+  const reason = String(gate.reason || "denied");
+  const floor = gate.floor_version ? ` (floor ${gate.floor_version})` : "";
+  return `claim gate: DENIED \u2014 ${reason}${floor}: ${(Object.hasOwn(REASON_HELP, reason) ? REASON_HELP[reason] : null) ?? "the control plane refused this runner's claims"}`;
 }
-function buildWindowsClaudeLaunch({
-  bin = "claude",
-  args = [],
-  env: env2 = process.env
-} = {}) {
+function makeClaimGateNotice({ log: log2 = () => {
+} } = {}) {
+  let last = null;
+  let current = null;
   return {
-    bin: resolveWindowsClaudeExecutable({ bin, env: env2 }),
-    args: Array.from(args, (value) => String(value)),
-    spawnOptions: {
-      shell: false,
-      windowsHide: true,
-      windowsVerbatimArguments: false
+    current: () => current,
+    observe(json) {
+      const gate = json && typeof json === "object" ? json.claim_gate : null;
+      const denied = gate && gate.allowed === false ? gate : null;
+      current = denied ? { ...denied, observed_at: (/* @__PURE__ */ new Date()).toISOString() } : null;
+      const signature = denied ? `${denied.reason}|${denied.floor_version ?? ""}` : null;
+      if (signature === last) return;
+      if (denied) log2(describeClaimGate(denied));
+      else if (last !== null) log2("claim gate: allowed again \u2014 this runner may claim work");
+      last = signature;
     }
   };
 }
-function spawnClaudeSync(args = [], options = {}) {
-  if (process.platform !== "win32") {
-    return spawnSync("claude", args, { windowsHide: true, ...options });
-  }
-  try {
-    const launch = buildWindowsClaudeLaunch({
-      bin: "claude",
-      args,
-      env: options.env || process.env
-    });
-    return spawnSync(launch.bin, launch.args, {
-      ...options,
-      ...launch.spawnOptions
-    });
-  } catch (error) {
-    return {
-      error,
-      status: null,
-      signal: null,
-      output: null,
-      stdout: null,
-      stderr: null
-    };
-  }
-}
-var NATIVE_CLAUDE_PARTS;
-var init_windows_claude_launch = __esm({
-  "../../scripts/virtual-office/code-runner/windows-claude-launch.mjs"() {
+var REASON_HELP;
+var init_claim_gate_notice = __esm({
+  "../../scripts/virtual-office/code-runner/claim-gate-notice.mjs"() {
     "use strict";
-    NATIVE_CLAUDE_PARTS = [
-      "node_modules",
-      "@anthropic-ai",
-      "claude-code",
-      "bin",
-      "claude.exe"
-    ];
+    REASON_HELP = {
+      daemon_version_below_floor: "this daemon is older than the approved release target \u2014 it idles until the governed updater brings it current (operator override: VO_RUNNER_CLAIM_MIN_DAEMON_VERSION / VO_RUNNER_CLAIM_VERSION_GATE=off on the control plane)",
+      daemon_version_unreported: "this daemon reports no parseable version in its heartbeat \u2014 too old for the updater to manage, so it may not claim work",
+      no_fresh_heartbeat: "the control plane has no fresh heartbeat from this runner \u2014 claims resume once heartbeats land",
+      runner_denylisted: "this runner id is on the operator quarantine list (VO_RUNNER_CLAIM_DENYLIST)"
+    };
   }
 });
 
-// ../../scripts/virtual-office/code-runner/claude-credential-choice.mjs
-function isTruthyFlag(v) {
-  const s = String(v ?? "").trim().toLowerCase();
-  return s === "1" || s === "true" || s === "yes" || s === "on";
+// ../../scripts/virtual-office/code-runner/control-plane-knowledge-context.mjs
+function canonicalizeKnowledgeContextQuery(value) {
+  return typeof value === "string" ? value.trimStart().slice(0, KNOWLEDGE_CONTEXT_QUERY_MAX_CHARS) : "";
 }
-function wantsLogin(env2) {
-  return isTruthyFlag(env2[CLAUDE_PREFER_LOGIN_ENV]) || isTruthyFlag(env2[PREFER_LOGIN_ENV]);
+function isRetryableStatus(status) {
+  return status >= 500 && status <= 599;
 }
-function wantsKey(env2) {
-  return isTruthyFlag(env2[CLAUDE_PREFER_KEY_ENV]) || isTruthyFlag(env2[PREFER_KEY_ENV]);
+function defaultSleep(ms) {
+  return new Promise((resolve3) => {
+    setTimeout(resolve3, ms);
+  });
 }
-function classifyClaudeCredential(baseEnv = {}, { getKey, probeLogin } = {}) {
-  const preferKey = wantsKey(baseEnv);
-  if (!preferKey && wantsLogin(baseEnv)) {
-    return { source: CLAUDE_CREDENTIAL_SOURCE.PREFER_LOGIN, key: null };
-  }
-  if (baseEnv.ANTHROPIC_API_KEY) {
-    return { source: CLAUDE_CREDENTIAL_SOURCE.ENV_KEY, key: null };
-  }
-  const key = getKey();
-  if (!key) {
-    return { source: CLAUDE_CREDENTIAL_SOURCE.NO_KEY, key: null };
+async function getTaskKnowledgeContextRequest(req, taskId, { query, knowledgeRequestId } = {}, {
+  taskRequestTimeoutMs,
+  invalidateToken = () => {
+  },
+  sleep: sleep3 = defaultSleep,
+  log: log2 = () => {
   }
-  if (preferKey) {
-    return { source: CLAUDE_CREDENTIAL_SOURCE.KEYCHAIN_PREFER_KEY, key };
+} = {}) {
+  const body = {};
+  const canonicalQuery = canonicalizeKnowledgeContextQuery(query);
+  if (canonicalQuery.trim()) body.query = canonicalQuery;
+  if (typeof knowledgeRequestId === "string" && knowledgeRequestId) body.knowledge_request_id = knowledgeRequestId;
+  const path25 = `/api/v1/code-task/${encodeURIComponent(taskId)}/knowledge-context`;
+  const timeoutMs = Math.max(Number(taskRequestTimeoutMs) || 0, MIN_KNOWLEDGE_CONTEXT_TIMEOUT_MS);
+  for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt += 1) {
+    let res;
+    let cause;
+    try {
+      res = await req("POST", path25, body, { timeoutMs });
+    } catch (err) {
+      cause = err;
+    }
+    if (!cause) {
+      if (res.status === 401) {
+        invalidateToken();
+        throw new Error("knowledge-context unauthorized (401)");
+      }
+      if (res.status === 404) return null;
+      if (res.ok) return res.json();
+      if (!isRetryableStatus(res.status)) {
+        throw new Error(`knowledge-context failed: HTTP ${res.status}`);
+      }
+      cause = new Error(`knowledge-context failed: HTTP ${res.status}`);
+    }
+    if (attempt === MAX_ATTEMPTS) throw cause;
+    const delayMs = RETRY_DELAYS_MS[attempt - 1];
+    log2(`knowledge-context attempt ${attempt}/${MAX_ATTEMPTS} failed (${cause.message}); retrying in ${delayMs}ms`);
+    await sleep3(delayMs);
   }
-  if (probeLogin() === true) {
-    return { source: CLAUDE_CREDENTIAL_SOURCE.SUBSCRIPTION_WINS, key: null };
-  }
-  return { source: CLAUDE_CREDENTIAL_SOURCE.KEYCHAIN, key };
+  throw new Error("knowledge-context retry loop exited unexpectedly");
 }
-var PREFER_LOGIN_ENV, CLAUDE_PREFER_LOGIN_ENV, PREFER_KEY_ENV, CLAUDE_PREFER_KEY_ENV, CLAUDE_CREDENTIAL_SOURCE;
-var init_claude_credential_choice = __esm({
-  "../../scripts/virtual-office/code-runner/claude-credential-choice.mjs"() {
+var MIN_KNOWLEDGE_CONTEXT_TIMEOUT_MS, KNOWLEDGE_CONTEXT_QUERY_MAX_CHARS, RETRY_DELAYS_MS, MAX_ATTEMPTS;
+var init_control_plane_knowledge_context = __esm({
+  "../../scripts/virtual-office/code-runner/control-plane-knowledge-context.mjs"() {
     "use strict";
-    PREFER_LOGIN_ENV = "VO_RUNNER_PREFER_LOGIN";
-    CLAUDE_PREFER_LOGIN_ENV = "VO_RUNNER_CLAUDE_PREFER_LOGIN";
-    PREFER_KEY_ENV = "VO_RUNNER_PREFER_KEY";
-    CLAUDE_PREFER_KEY_ENV = "VO_RUNNER_CLAUDE_PREFER_KEY";
-    CLAUDE_CREDENTIAL_SOURCE = Object.freeze({
-      /** PREFER_LOGIN set (and not overridden): any API key is ignored. */
-      PREFER_LOGIN: "prefer_login",
-      /** An explicit ANTHROPIC_API_KEY in the environment — the manual override. */
-      ENV_KEY: "env_key",
-      /** No key anywhere; the spawn falls through to the login session. */
-      NO_KEY: "no_key",
-      /** A stored key, used because the operator explicitly opted out of tier 1. */
-      KEYCHAIN_PREFER_KEY: "keychain_prefer_key",
-      /** A stored key exists but a proven live subscription outranks it. */
-      SUBSCRIPTION_WINS: "subscription_wins",
-      /** A stored key, used because no live subscription was proven. */
-      KEYCHAIN: "keychain"
-    });
+    MIN_KNOWLEDGE_CONTEXT_TIMEOUT_MS = 15e3;
+    KNOWLEDGE_CONTEXT_QUERY_MAX_CHARS = 2e3;
+    RETRY_DELAYS_MS = [2e3, 6e3];
+    MAX_ATTEMPTS = RETRY_DELAYS_MS.length + 1;
   }
 });
 
-// ../../scripts/virtual-office/code-runner/anthropic-key-store.mjs
-import { createRequire as createRequire2 } from "node:module";
-import { spawnSync as spawnSync2 } from "node:child_process";
-function defaultEntryCtor() {
-  if (_loadTried) return _entryCtor;
-  _loadTried = true;
-  try {
-    _entryCtor = require2("@napi-rs/keyring").Entry;
-  } catch {
-    _entryCtor = null;
+// ../../scripts/virtual-office/code-runner/control-plane-prepared-job.mjs
+function preparedJobQuery({ agent = "claude", env: env2 = {} } = {}) {
+  const params = new URLSearchParams();
+  params.set("agent", String(agent));
+  const sent = [];
+  const dropped = [];
+  for (const key of PREPARED_JOB_ENV_QUERY_KEYS) {
+    const raw = env2?.[key];
+    if (typeof raw !== "string" || raw.length === 0) continue;
+    if (raw.length > PREPARED_JOB_ENV_VALUE_MAX) {
+      dropped.push(key);
+      continue;
+    }
+    params.set(key, raw);
+    sent.push(key);
   }
-  return _entryCtor;
+  return { query: params.toString(), sent, dropped };
 }
-function getAnthropicKey({ EntryCtor = defaultEntryCtor() } = {}) {
-  if (!EntryCtor) return null;
+async function refusalCode(res) {
   try {
-    return new EntryCtor(KEY_SERVICE, KEY_ACCOUNT).getPassword() || null;
+    const body = await res.json();
+    return typeof body?.error === "string" && body.error ? body.error : null;
   } catch {
     return null;
   }
 }
-function withAnthropicKey(baseEnv = {}, { getKey = getAnthropicKey, probeLogin = probeClaudeLoginState } = {}) {
-  const { source, key } = classifyClaudeCredential(baseEnv, { getKey, probeLogin });
-  const next = { ...baseEnv };
-  if (source === CLAUDE_CREDENTIAL_SOURCE.PREFER_LOGIN) {
-    delete next.ANTHROPIC_API_KEY;
-    return next;
+async function getPreparedJobRequest(req, taskId, options = {}, invalidateToken = () => {
+}) {
+  const { agent = "claude", env: env2 = {}, timeoutMs = 15e3 } = options;
+  const { query, sent, dropped } = preparedJobQuery({ agent, env: env2 });
+  const envMeta = { envSent: sent, envDropped: dropped };
+  if (typeof taskId !== "string" || taskId.length === 0) {
+    return { ok: false, reason: "missing_task_id", status: 0, ...envMeta };
   }
-  if (key !== null) next.ANTHROPIC_API_KEY = key;
-  return next;
-}
-function claudeCostBasis(env2 = process.env) {
-  return String(env2.ANTHROPIC_API_KEY || "").trim() ? "vendor_billed" : "subscription_api_equivalent";
+  const path25 = `/api/v1/code-task/${encodeURIComponent(taskId)}/prepared-job?${query}`;
+  let res;
+  try {
+    res = await req("GET", path25, void 0, { timeoutMs });
+  } catch (err) {
+    return { ok: false, reason: `transport: ${err?.message || String(err)}`, status: 0, ...envMeta };
+  }
+  if (res?.status === 401) {
+    try {
+      invalidateToken();
+    } catch {
+    }
+    return { ok: false, reason: "unauthorized", status: 401, ...envMeta };
+  }
+  if (!res?.ok) {
+    const code = await refusalCode(res);
+    return { ok: false, reason: code || `http_${res?.status ?? "unknown"}`, status: res?.status ?? 0, ...envMeta };
+  }
+  let body;
+  try {
+    body = await res.json();
+  } catch (err) {
+    return { ok: false, reason: `unreadable_body: ${err?.message || String(err)}`, status: res.status, ...envMeta };
+  }
+  const job = body?.prepared_job;
+  if (!job || typeof job !== "object") {
+    return { ok: false, reason: "no_prepared_job_in_body", status: res.status, ...envMeta };
+  }
+  return {
+    ok: true,
+    job,
+    composition: body?.composition && typeof body.composition === "object" ? body.composition : {},
+    ...envMeta
+  };
 }
-function describeAnthropicAuthSource(baseEnv = {}, { getKey = getAnthropicKey, probeLogin = probeClaudeLoginState } = {}) {
-  const { source } = classifyClaudeCredential(baseEnv, { getKey, probeLogin });
-  return AUTH_SOURCE_DESCRIPTION[source];
+var PREPARED_JOB_ENV_QUERY_KEYS, PREPARED_JOB_ENV_VALUE_MAX;
+var init_control_plane_prepared_job = __esm({
+  "../../scripts/virtual-office/code-runner/control-plane-prepared-job.mjs"() {
+    "use strict";
+    PREPARED_JOB_ENV_QUERY_KEYS = [
+      "VO_CODE_RUNNER_NO_WEB",
+      "VO_CODE_RUNNER_NO_WORKFLOW",
+      "VO_CODE_RUNNER_NO_CONSENSUS",
+      "VO_CODE_RUNNER_PERMISSION_MODE",
+      "VO_CODE_RUNNER_DEFAULT_BUDGET_USD",
+      "VO_CODE_RUNNER_META_REASONING_EFFORT",
+      "VO_CODE_RUNNER_ALLOW_MISSING_KNOWLEDGE_CONTEXT",
+      "VO_ENABLE_CONTEXT7"
+    ];
+    PREPARED_JOB_ENV_VALUE_MAX = 64;
+  }
+});
+
+// src/runner/control-plane-auth-stub.mjs
+var control_plane_auth_stub_exports = {};
+__export(control_plane_auth_stub_exports, {
+  getFirebaseAuth: () => getFirebaseAuth
+});
+async function getFirebaseAuth() {
+  throw new Error(
+    "vo-mcp runner: no control-plane credential. Run `vo-mcp login` first \u2014 the runner authenticates with your stored vo_credential (or set VO_CONTROL_PLANE_ADMIN_TOKEN)."
+  );
 }
-function augmentAuthError(summary) {
-  const s = String(summary ?? "");
-  if (!AUTH_ERROR_RE.test(s)) return s;
-  return `${s}
-\u21B3 Anthropic auth failed on the runner. The \`claude\` CLI is a SEPARATE install/login from the Claude Desktop app and the Claude Code IDE extension \u2014 signing into those does NOT authenticate it. Fix: run \`claude auth login\` (Claude subscription) on the runner machine, or clear any stale ANTHROPIC_API_KEY (env / OS keychain / .env.local) and set VO_RUNNER_PREFER_LOGIN=1 \u2014 then restart the runner. Verify with \`claude -p "say hi"\`.`;
+var init_control_plane_auth_stub = __esm({
+  "src/runner/control-plane-auth-stub.mjs"() {
+  }
+});
+
+// ../../scripts/virtual-office/code-runner/control-plane-client.mjs
+async function resolveBearer(env2) {
+  const adminToken = env2.VO_CONTROL_PLANE_ADMIN_TOKEN;
+  if (adminToken) return adminToken;
+  if (cachedFirebaseToken) return cachedFirebaseToken;
+  const { getFirebaseAuth: getFirebaseAuth2 } = await Promise.resolve().then(() => (init_control_plane_auth_stub(), control_plane_auth_stub_exports));
+  const auth = await getFirebaseAuth2({ env: env2 });
+  if (!auth || !auth.idToken) {
+    throw new Error(
+      "no control-plane credential: set VO_CONTROL_PLANE_ADMIN_TOKEN, or SMOKE_EMAIL/SMOKE_PASSWORD/SMOKE_API_KEY"
+    );
+  }
+  cachedFirebaseToken = auth.idToken;
+  return cachedFirebaseToken;
 }
-function probeClaudeLoginState({
-  spawn: spawn5 = spawnSync2,
-  buildWindowsLaunch = buildWindowsClaudeLaunch,
-  platform: platform4 = process.platform
+function createControlPlaneClient({
+  baseUrl,
+  env: env2 = process.env,
+  fetchImpl = fetch,
+  heartbeatTimeoutMs = Math.min(
+    Math.max(Number(env2.VO_CODE_RUNNER_HEARTBEAT_TIMEOUT_MS) || 15e3, 1e3),
+    6e4
+  ),
+  taskRequestTimeoutMs = Math.min(
+    Math.max(Number(env2.VO_CODE_RUNNER_TASK_REQUEST_TIMEOUT_MS) || 5e3, 100),
+    6e4
+  ),
+  runnerId,
+  runnerInstanceId,
+  sleep: sleep3
 } = {}) {
-  try {
-    const launch = platform4 === "win32" ? buildWindowsLaunch({ bin: "claude", args: ["auth", "status"] }) : { bin: "claude", args: ["auth", "status"], spawnOptions: { windowsHide: true } };
-    const st = spawn5(launch.bin, launch.args, { ...launch.spawnOptions, timeout: 5e3, encoding: "utf8" });
-    const parsed = JSON.parse(String(st.stdout || "").trim() || "{}");
-    return typeof parsed.loggedIn === "boolean" ? parsed.loggedIn : null;
-  } catch {
-    return null;
+  const resolvedBaseUrl = baseUrl ?? env2.VO_CONTROL_PLANE_URL ?? "";
+  if (!resolvedBaseUrl) throw new Error("VO_CONTROL_PLANE_URL is required for the code-runner daemon");
+  const root = resolvedBaseUrl.replace(/\/+$/, "");
+  const claimOccurrences = /* @__PURE__ */ new Map();
+  async function req(method, path25, body, { timeoutMs } = {}) {
+    const bearer = await resolveBearer(env2);
+    const controller = timeoutMs ? new AbortController() : null;
+    let timeoutId;
+    const request = Promise.resolve(fetchImpl(`${root}${path25}`, {
+      method,
+      headers: {
+        "content-type": "application/json",
+        authorization: `Bearer ${bearer}`
+      },
+      body: body === void 0 ? void 0 : JSON.stringify(body),
+      ...controller ? { signal: controller.signal } : {}
+    }));
+    if (!timeoutMs) return request;
+    const timeout = new Promise((_, reject) => {
+      timeoutId = setTimeout(() => {
+        controller.abort();
+        reject(new Error(`control-plane ${path25} timed out after ${timeoutMs}ms`));
+      }, timeoutMs);
+    });
+    try {
+      return await Promise.race([request, timeout]);
+    } finally {
+      clearTimeout(timeoutId);
+    }
   }
+  const taskReq = (method, path25, body, options = {}) => req(method, path25, body, { timeoutMs: taskRequestTimeoutMs, ...options });
+  const claimGate = makeClaimGateNotice({ log: (m) => console.warn(`[code-runner ${(/* @__PURE__ */ new Date()).toISOString()}] ${m}`) });
+  return {
+    getClaimGate: () => claimGate.current(),
+    // last DENIED claim-gate verdict (null when allowed) — for /status + tests
+    ...makeAutonomousDispatchAdmissionClient(
+      req,
+      taskRequestTimeoutMs,
+      () => {
+        cachedFirebaseToken = null;
+      }
+    ),
+    /**
+     * Claim the next pending task. Returns the task or null (empty queue).
+     * `repos` (optional `owner/name` list) and `operatorIds` (optional
+     * `operator_id` list) scope the claim so this daemon only picks up tasks it
+     * serves — the control-plane filters by both (logical AND), so another
+     * operator's task never lands on (or bills) this machine.
+     */
+    async claim(runnerId2, repos, operatorIds, session = {}) {
+      const body = { runner_id: runnerId2 };
+      if (Array.isArray(repos) && repos.length > 0) body.repos = repos;
+      if (Array.isArray(operatorIds) && operatorIds.length > 0) body.operator_ids = operatorIds;
+      if (session.runnerInstanceId) {
+        body.runner_instance_id = session.runnerInstanceId;
+        body.runner_progress_protocol_version = 2;
+      }
+      if (session.runnerInstanceId && session.reconcileStale) body.reconcile_stale = true;
+      if (session.defaultAgent) body.default_agent = session.defaultAgent;
+      if (AGENT_AUTH_SOURCES.includes(session.agentAuthSource)) body.agent_auth_source = session.agentAuthSource;
+      if (Array.isArray(session.availableAgents)) {
+        body.available_agents = session.availableAgents.filter((entry) => entry?.installed === true && entry?.authenticated === true).map((entry) => entry.agent);
+      }
+      const res = await taskReq("POST", "/api/v1/code-task/claim", body);
+      if (res.status === 401) {
+        cachedFirebaseToken = null;
+        throw new Error("claim unauthorized (401)");
+      }
+      if (!res.ok) throw new Error(`claim failed: HTTP ${res.status}`);
+      const json = await res.json();
+      claimGate.observe(json);
+      const task = json && json.task ? json.task : null;
+      if (task?.claim_occurrence_id) claimOccurrences.set(task.code_task_id, task.claim_occurrence_id);
+      return task;
+    },
+    /**
+     * Enqueue a new code-task (used by the PR watcher to auto-dispatch a CI fix).
+     * Server derives operator/tenant from the daemon's authenticated principal.
+     * Returns the created task, or throws on a non-2xx response.
+     */
+    async enqueueCodeTask({ repo, prompt, max_budget_usd, max_turns, dispatch_mode, tier, agent, model, dispatch_occurrence_key, autonomous_reservation_id, on_behalf_of_operator_id, repair_pr_number, repair_kind, repair_head_sha, repair_chain }) {
+      const body = { repo, prompt };
+      if (typeof max_budget_usd === "number") body.max_budget_usd = max_budget_usd;
+      if (typeof max_turns === "number") body.max_turns = max_turns;
+      for (const [key, value] of Object.entries({ dispatch_mode, tier, agent, model, repair_kind, repair_head_sha })) {
+        if (value) body[key] = value;
+      }
+      if (dispatch_occurrence_key) body.dispatch_occurrence_key = dispatch_occurrence_key;
+      if (autonomous_reservation_id) body.autonomous_reservation_id = autonomous_reservation_id;
+      if (on_behalf_of_operator_id) body.on_behalf_of_operator_id = on_behalf_of_operator_id;
+      if (Number.isInteger(repair_pr_number) && repair_pr_number > 0) body.repair_pr_number = repair_pr_number;
+      if (repair_chain) body.repair_chain = repair_chain;
+      const res = await taskReq("POST", "/api/v1/code-task", body);
+      if (res.status === 401) {
+        cachedFirebaseToken = null;
+        throw new Error("enqueue unauthorized (401)");
+      }
+      if (!res.ok) {
+        let code = null;
+        try {
+          const errBody = await res.json();
+          code = typeof errBody?.error === "string" ? errBody.error : null;
+        } catch {
+        }
+        const err = new Error(`enqueue failed: HTTP ${res.status}${code ? ` (${code})` : ""}`);
+        err.status = res.status;
+        err.code = code;
+        throw err;
+      }
+      const json = await res.json();
+      const task = json && json.task ? json.task : null;
+      if (task && typeof json.deduplicated === "boolean") Object.defineProperty(task, "deduplicated", { value: json.deduplicated, enumerable: false });
+      return task;
+    },
+    /**
+     * Resume a failed/cancelled/max-turn partial code-task. The PR watcher uses
+     * this after the runner opens a partial draft PR and CI is no longer pending.
+     */
+    async resumeCodeTask(taskId, { automaticRateLimit = false, automaticContinuation = false } = {}) {
+      return resumeCodeTaskRequest(taskReq, taskId, { automaticRateLimit, automaticContinuation }, () => {
+        cachedFirebaseToken = null;
+      });
+    },
+    /**
+     * Send a CI-green PR through the production verify-before-act merge route.
+     * The server inspects the current diff, applies deterministic blockers, runs
+     * consensus, records a receipt, and direct-merges only the inspected SHA.
+     */
+    /** F35: promote a PARTIAL draft to READY via the plane (admin-only; server re-checks; never merges). */
+    promoteDraftPr: (prNumber, automationContext) => promoteDraftPrRequest(req, prNumber, automationContext, () => {
+      cachedFirebaseToken = null;
+    }),
+    async mergeVerifiedPr(prNumber, automationContext) {
+      return mergeVerifiedPrRequest(
+        req,
+        prNumber,
+        automationContext,
+        () => {
+          cachedFirebaseToken = null;
+        }
+      );
+    },
+    async postProgress(taskId, patch) {
+      const progress = {
+        ...patch,
+        ...patch.runner_id ? {} : runnerId ? { runner_id: runnerId } : {},
+        ...patch.runner_instance_id ? {} : runnerInstanceId ? { runner_instance_id: runnerInstanceId } : {},
+        ...patch.claim_occurrence_id ? {} : claimOccurrences.has(taskId) ? { claim_occurrence_id: claimOccurrences.get(taskId) } : {}
+      };
+      const res = await taskReq("PATCH", `/api/v1/code-task/${taskId}/progress`, progress);
+      if (res.status === 409) {
+        const conflict = await res.json().catch(() => ({}));
+        if (conflict?.error === "code_task_claim_authority_changed") {
+          throw new ClaimAuthorityChangedError();
+        }
+        return { terminal: true };
+      }
+      if (res.status === 404) return { terminal: true, missing: true };
+      if (!res.ok) throw new Error(`progress failed: HTTP ${res.status}`);
+      const json = await res.json();
+      return { task: json && json.task };
+    },
+    async getTask(taskId) {
+      const res = await taskReq("GET", `/api/v1/code-task/${taskId}`);
+      if (res.status === 404) return null;
+      if (!res.ok) throw new Error(`getTask failed: HTTP ${res.status}`);
+      const json = await res.json();
+      return json ? json.task : null;
+    },
+    async getAssignedSkill(task) {
+      const name = task?.skill_invocation?.skill;
+      if (!runnerId || !runnerInstanceId || task?.claimed_by !== runnerId || task?.runner_instance_id !== runnerInstanceId || !task?.claim_occurrence_id || !name) {
+        throw new ClaimAuthorityChangedError();
+      }
+      const res = await taskReq("POST", `/api/v1/code-task/${encodeURIComponent(task.code_task_id)}/assigned-skill`, {
+        runner_id: runnerId,
+        runner_instance_id: runnerInstanceId,
+        claim_occurrence_id: task.claim_occurrence_id,
+        skill: name
+      });
+      if (res.status === 401) {
+        cachedFirebaseToken = null;
+        throw new Error("skill corpus unauthorized (401)");
+      }
+      if (res.status === 409) {
+        const conflict = await res.json().catch(() => ({}));
+        if (conflict?.error === "code_task_claim_authority_changed") {
+          throw new ClaimAuthorityChangedError();
+        }
+      }
+      if (res.status === 404) throw new Error(`skill not found: ${name}`);
+      if (!res.ok) throw new Error(`skill corpus failed: HTTP ${res.status}`);
+      const json = await res.json();
+      if (json?.corpus_available !== true || !json.skill) {
+        throw new Error(`skill corpus unavailable: ${String(json?.reason || "unknown")}`);
+      }
+      return json.skill;
+    },
+    async listPrOpenedTasks() {
+      return listAllPrOpenedTasks(taskReq);
+    },
+    async downloadTaskAttachment(taskId, attachmentId) {
+      const path25 = `/api/v1/code-task/${encodeURIComponent(taskId)}/attachment/${encodeURIComponent(attachmentId)}`;
+      const res = await taskReq("GET", path25);
+      if (res.status === 401) cachedFirebaseToken = null;
+      if (!res.ok) throw new Error(`attachment download failed: HTTP ${res.status}`);
+      return Buffer.from(await res.arrayBuffer());
+    },
+    // Raised per-attempt timeout (>=15s) + bounded retry — see control-plane-knowledge-context.mjs.
+    async getTaskKnowledgeContext(taskId, { query, knowledgeRequestId } = {}) {
+      return getTaskKnowledgeContextRequest(req, taskId, { query, knowledgeRequestId }, {
+        taskRequestTimeoutMs,
+        invalidateToken: () => {
+          cachedFirebaseToken = null;
+        },
+        sleep: sleep3,
+        log: (m) => console.warn(`[code-runner ${(/* @__PURE__ */ new Date()).toISOString()}] ${m}`)
+      });
+    },
+    /** ADR-004 § 11.1b: the plane's prepared job, for SHADOW comparison. Never throws. */
+    getPreparedJob: (taskId, options) => getPreparedJobRequest(req, taskId, options, () => {
+      cachedFirebaseToken = null;
+    }),
+    /** Weekly Claude token usage report — see control-plane-weekly-tokens.mjs. */
+    async postWeeklyTokens(report) {
+      return postWeeklyTokensRequest(taskReq, report, () => {
+        cachedFirebaseToken = null;
+      });
+    },
+    /**
+     * Relay a batch of this machine's local vo-mcp events to vo-telemetry via
+     * the control plane (telemetry-forwarder.mjs). Returns { status, body };
+     * the forwarder owns backoff/disable policy. See control-plane-telemetry-relay.mjs.
+     */
+    async relayTelemetryEvents(batch) {
+      return relayTelemetryEventsRequest(req, batch, () => {
+        cachedFirebaseToken = null;
+      });
+    },
+    /**
+     * Send a liveness heartbeat (M2). The control-plane upserts it under the
+     * authenticated operator so the web shows a TRUE "runner online" signal.
+     * Best-effort caller; throws on 401/non-ok so the daemon can log + retry.
+     */
+    async postHeartbeat(heartbeat) {
+      const body = buildRunnerHeartbeatBody(heartbeat);
+      const res = await req("POST", "/api/v1/runner/heartbeat", body, {
+        timeoutMs: heartbeatTimeoutMs
+      });
+      if (res.status === 401) {
+        cachedFirebaseToken = null;
+        throw new Error("heartbeat unauthorized (401)");
+      }
+      if (!res.ok) {
+        let detail = "";
+        try {
+          const body2 = await res.json();
+          if (Array.isArray(body2?.issue_paths) && body2.issue_paths.length > 0) {
+            detail = ` (rejected fields: ${body2.issue_paths.join(", ")})`;
+          }
+        } catch {
+        }
+        throw new Error(`heartbeat failed: HTTP ${res.status}${detail}`);
+      }
+      return res.json();
+    },
+    async getRunnerStatus({ operatorId } = {}) {
+      const query = operatorId ? `?operator_id=${encodeURIComponent(operatorId)}` : "";
+      const res = await req("GET", `/api/v1/runner/status${query}`, void 0, {
+        timeoutMs: heartbeatTimeoutMs
+      });
+      if (res.status === 401) {
+        cachedFirebaseToken = null;
+        throw new Error("runner status unauthorized (401)");
+      }
+      if (!res.ok) throw new Error(`runner status failed: HTTP ${res.status}`);
+      const body = await res.json();
+      return Array.isArray(body?.runners) ? body.runners : [];
+    },
+    async pollRunnerControl({ runnerId: runnerId2, operatorId, supervisorInstanceId, supervisorVersion, capabilities }) {
+      const body = { runner_id: runnerId2 };
+      if (operatorId) body.operator_id = operatorId;
+      if (supervisorInstanceId) body.supervisor_instance_id = supervisorInstanceId;
+      if (supervisorVersion) body.supervisor_version = supervisorVersion;
+      if (Array.isArray(capabilities) && capabilities.length > 0) body.capabilities = capabilities;
+      const res = await taskReq("POST", "/api/v1/runner/control/poll", body);
+      if (res.status === 401) {
+        cachedFirebaseToken = null;
+        throw new Error("runner control poll unauthorized (401)");
+      }
+      if (!res.ok) throw new Error(`runner control poll failed: HTTP ${res.status}`);
+      const json = await res.json();
+      const action = json?.action;
+      return action && typeof action.action_id === "string" && action.action_id ? { ...action, actionId: action.action_id } : null;
+    },
+    async completeRunnerControl(actionId, { runnerId: runnerId2, operatorId, supervisorInstanceId, supervisorVersion, capabilities, status, detail }) {
+      const body = { runner_id: runnerId2, status };
+      if (operatorId) body.operator_id = operatorId;
+      if (supervisorInstanceId) body.supervisor_instance_id = supervisorInstanceId;
+      if (supervisorVersion) body.supervisor_version = supervisorVersion;
+      if (Array.isArray(capabilities) && capabilities.length > 0) body.capabilities = capabilities;
+      if (detail) body.detail = detail;
+      const res = await taskReq("POST", `/api/v1/runner/control/${encodeURIComponent(actionId)}/complete`, body);
+      if (res.status === 401) {
+        cachedFirebaseToken = null;
+        throw new Error("runner control completion unauthorized (401)");
+      }
+      if (!res.ok) throw new Error(`runner control completion failed: HTTP ${res.status}`);
+      const json = await res.json();
+      return json?.action || null;
+    },
+    /** Mint a GitHub App installation token — see installation-token.mjs. */
+    async getInstallationToken({ required = false, readOnly = false, repo = null } = {}) {
+      return fetchInstallationToken({ req: taskReq, required, readOnly, repo });
+    },
+    /**
+     * Read the operator's dispatch-mode config (Fast→Ultracode effort setting).
+     * Returns the mode string ('fast'|'standard'|'deep'|'ultra'|'marathon'; 'ultracode' legacy),
+     * defaulting to 'standard' on any error. Never throws — best-effort.
+     */
+    async getDispatchMode() {
+      try {
+        const res = await taskReq("GET", "/api/v1/dispatch-mode-config");
+        if (!res.ok) return "standard";
+        const json = await res.json();
+        return json?.dispatchMode || "standard";
+      } catch {
+        return "standard";
+      }
+    }
+  };
 }
-var require2, KEY_SERVICE, KEY_ACCOUNT, _entryCtor, _loadTried, AUTH_SOURCE_DESCRIPTION, AUTH_ERROR_RE;
-var init_anthropic_key_store = __esm({
-  "../../scripts/virtual-office/code-runner/anthropic-key-store.mjs"() {
+var cachedFirebaseToken, ClaimAuthorityChangedError;
+var init_control_plane_client = __esm({
+  "../../scripts/virtual-office/code-runner/control-plane-client.mjs"() {
     "use strict";
-    init_windows_claude_launch();
-    init_claude_credential_choice();
-    init_claude_credential_choice();
-    require2 = createRequire2(import.meta.url);
-    KEY_SERVICE = "algosuite-vo";
-    KEY_ACCOUNT = "anthropic-api-key";
-    _loadTried = false;
-    AUTH_SOURCE_DESCRIPTION = Object.freeze({
-      [CLAUDE_CREDENTIAL_SOURCE.PREFER_LOGIN]: "claude auth login (VO_RUNNER_PREFER_LOGIN set \u2014 any API key ignored)",
-      [CLAUDE_CREDENTIAL_SOURCE.ENV_KEY]: "ANTHROPIC_API_KEY from environment",
-      [CLAUDE_CREDENTIAL_SOURCE.NO_KEY]: "claude auth login session (no API key set)",
-      [CLAUDE_CREDENTIAL_SOURCE.KEYCHAIN_PREFER_KEY]: "ANTHROPIC_API_KEY from OS keychain (VO_RUNNER_PREFER_KEY set \u2014 subscription ignored)",
-      [CLAUDE_CREDENTIAL_SOURCE.SUBSCRIPTION_WINS]: "claude auth login session (subscription beats the stored keychain key)",
-      [CLAUDE_CREDENTIAL_SOURCE.KEYCHAIN]: "ANTHROPIC_API_KEY from OS keychain"
-    });
-    AUTH_ERROR_RE = /\b401\b|invalid[^.]{0,24}(authentication|credential)|authentication_error|unauthorized|not[ _-]?authenticated/i;
+    init_installation_token();
+    init_control_plane_heartbeat_body();
+    init_control_plane_promote();
+    init_control_plane_task_list();
+    init_control_plane_resume();
+    init_control_plane_autonomous_admission();
+    init_control_plane_merge();
+    init_control_plane_weekly_tokens();
+    init_control_plane_telemetry_relay();
+    init_claim_gate_notice();
+    init_agent_auth_attestation();
+    init_control_plane_knowledge_context();
+    init_control_plane_prepared_job();
+    cachedFirebaseToken = null;
+    ClaimAuthorityChangedError = class extends Error {
+      constructor() {
+        super("code-task claim authority changed");
+        this.name = "ClaimAuthorityChangedError";
+        this.code = "code_task_claim_authority_changed";
+      }
+    };
   }
 });
 
@@ -5827,11 +5913,14 @@ function runAgentTask({
   exitDrainGraceMs = 300,
   armTerminalCleanup = armTerminalProcessCleanup,
   spawnImpl = spawn2,
-  sandbox = null
+  sandbox = null,
+  allowApiBilling = false
 }) {
   return new Promise((resolve3) => {
     const args = runner.buildArgs({ permissionMode, maxTurns, model, effort, maxBudgetUsd, researchHarness, toolPolicy, structuredOutputSchema, prompt });
-    const spawnEnv = typeof runner.applyAuthEnv === "function" ? runner.applyAuthEnv(env2) : env2;
+    const authedEnv = typeof runner.applyAuthEnv === "function" ? runner.applyAuthEnv(env2) : env2;
+    const billing = applyApiBillingPolicy(authedEnv, { runnerEnv: env2, allowApiBilling });
+    const spawnEnv = billing.env;
     const costBasis = typeof runner.costBasis === "function" ? runner.costBasis(spawnEnv) : "unknown";
     if (costBasis === "vendor_billed" && runner.enforcesBudgetCap !== true && env2.VO_CODE_RUNNER_ALLOW_UNCAPPED_VENDOR_BILLED !== "1") {
       throw new Error(
@@ -5875,7 +5964,7 @@ function runAgentTask({
     } catch {
     }
     let buffer = "";
-    let result = { ok: false, costUsd: null, costBasis, summary: "", lastAgentMessage: null, structuredOutput: null, terminalSubtype: null, numTurns: null, tokenUsage: null, modelUsage: null, executionStarted: false, killed: false };
+    let result = { ok: false, costUsd: null, costBasis, summary: "", lastAgentMessage: null, structuredOutput: null, terminalSubtype: null, numTurns: null, tokenUsage: null, modelUsage: null, executionStarted: false, killed: false, agentAuthSource: billing.agent_auth_source };
     child.once("spawn", () => {
       result = { ...result, executionStarted: true };
       Promise.resolve(onSpawn()).catch(() => {
@@ -6060,6 +6149,7 @@ var init_claude_runner = __esm({
     init_claude_result_event();
     init_claude_auth_check();
     init_claude_skill_capability();
+    init_agent_auth_attestation();
     ClaudeRunner = class {
       get enforcesBudgetCap() {
         return true;
@@ -6281,7 +6371,7 @@ var init_error_message = __esm({
 import { spawnSync as spawnSync7 } from "node:child_process";
 import { existsSync as existsSync10 } from "node:fs";
 import { win32 as win322 } from "node:path";
-function isTruthyFlag2(value) {
+function isTruthyFlag3(value) {
   return ["1", "true", "yes", "on"].includes(String(value ?? "").trim().toLowerCase());
 }
 function resolveCodexBinary({
@@ -6432,7 +6522,7 @@ var init_codex_runner = __esm({
         };
       }
       applyAuthEnv(env2 = process.env) {
-        if (isTruthyFlag2(env2[CODEX_PREFER_LOGIN_ENV]) || isTruthyFlag2(env2[LEGACY_PREFER_LOGIN_ENV])) {
+        if (isTruthyFlag3(env2[CODEX_PREFER_LOGIN_ENV]) || isTruthyFlag3(env2[LEGACY_PREFER_LOGIN_ENV])) {
           const out = { ...env2 };
           delete out.OPENAI_API_KEY;
           delete out.CODEX_API_KEY;
@@ -7870,14 +7960,14 @@ function parsePorcelainZ(out) {
   for (let i = 0; i < tokens.length; i += 1) {
     const token2 = tokens[i];
     if (!token2) continue;
-    const path24 = token2.slice(3);
-    if (path24) files.push(path24);
+    const path25 = token2.slice(3);
+    if (path25) files.push(path25);
     if (token2[0] === "R" || token2[0] === "C") i += 1;
   }
   return files;
 }
-function isAgentScratch(path24) {
-  const normalized = String(path24 || "");
+function isAgentScratch(path25) {
+  const normalized = String(path25 || "");
   return SCRATCH_PATTERNS.some((pattern) => pattern.test(normalized));
 }
 var SCRATCH_PATTERNS;
@@ -10213,9 +10303,9 @@ async function readSpool(spoolDir = SPOOL_DIR) {
   }
   return out;
 }
-async function readCloudMap(path24) {
+async function readCloudMap(path25) {
   try {
-    return JSON.parse(await readFile2(path24, "utf8"));
+    return JSON.parse(await readFile2(path25, "utf8"));
   } catch {
     return {};
   }
@@ -10516,9 +10606,9 @@ function backoffMs(streak, baseMs) {
   if (streak <= 0) return 0;
   return Math.min(baseMs * 2 ** Math.min(streak - 1, 20), MAX_BACKOFF_MS);
 }
-async function loadState(path24) {
+async function loadState(path25) {
   try {
-    const parsed = JSON.parse(await readFile3(path24, "utf8"));
+    const parsed = JSON.parse(await readFile3(path25, "utf8"));
     if (parsed && typeof parsed === "object" && Number.isInteger(parsed.byte_offset) && parsed.byte_offset >= 0) {
       return { ...parsed, byte_offset: parsed.byte_offset };
     }
@@ -10526,15 +10616,15 @@ async function loadState(path24) {
   }
   return { byte_offset: 0, last_event_id: null, forwarded_total: 0, rejected_total: 0, rejected_event_ids: [] };
 }
-async function saveState(path24, state) {
-  await mkdir2(dirname9(path24), { recursive: true });
-  await writeFile3(path24, JSON.stringify(state, null, 2), "utf8");
+async function saveState(path25, state) {
+  await mkdir2(dirname9(path25), { recursive: true });
+  await writeFile3(path25, JSON.stringify(state, null, 2), "utf8");
 }
-async function readNewBytes(path24, offset, max) {
-  const st = await stat2(path24);
+async function readNewBytes(path25, offset, max) {
+  const st = await stat2(path25);
   if (st.size <= offset) return { buf: Buffer.alloc(0), size: st.size };
   const length = Math.min(st.size - offset, max);
-  const fh = await open(path24, "r");
+  const fh = await open(path25, "r");
   try {
     const buf = Buffer.alloc(length);
     const { bytesRead } = await fh.read(buf, 0, length, offset);
@@ -10822,6 +10912,16 @@ function makeLoopTicks({
   getAgentAvailability = () => null,
   // Cached account-usage provider (account-usage.mjs); [] omits the field.
   getAccountUsage = () => [],
+  // Host-preflight verdict (host-preflight.mjs) — why this host is or is not
+  // claiming. GATED OFF BY DEFAULT and that is deliberate: the plane's
+  // heartbeat input schema is `.strict()`, so sending `host_health` before
+  // that schema accepts it would 400 EVERY beat and take the machine off the
+  // fleet — the 2026-07-25 `version` outage, and it would fire hardest on
+  // exactly the broken hosts this field describes. Flip
+  // VO_HOST_HEALTH_HEARTBEAT=1 once runner-host-health-v1 is wired into
+  // runner-heartbeat-v1.ts and deployed. The claim GATE does not depend on
+  // this: a blocked host stops claiming either way.
+  getHostHealth = () => null,
   // Injectable for tests; default to the real scheduler + wall clock.
   runResumeScheduler = runScheduler,
   now: nowFn = () => Date.now(),
@@ -10922,10 +11022,17 @@ function makeLoopTicks({
         ...servedOperators.length > 0 ? { servedOperators } : {},
         ...Array.isArray(availableAgents) && availableAgents.length > 0 ? { availableAgents } : {},
         ...Array.isArray(accountUsage) && accountUsage.length > 0 ? { accountUsage } : {},
+        ...env2.VO_HOST_HEALTH_HEARTBEAT === "1" && getHostHealth() ? { hostHealth: getHostHealth() } : {},
         uptimeSec: Math.floor(process.uptime()),
         activeTasks: getActive(),
         maxConcurrency: cfg.maxConcurrency,
         supportedTaskKinds: supportedTaskKindsFor(availableAgents),
+        // Attested EVERY beat, from the daemon's own env + keychain, so the plane's
+        // runner-api-billing-gate can refuse a metered machine BEFORE it claims.
+        // Never throws (see resolveRunnerAttestedAuthSource) — a heartbeat that
+        // 500s on its own attestation would take the host off the fleet, which is
+        // strictly worse than the spend it was trying to prevent.
+        agentAuthSource: resolveRunnerAttestedAuthSource(env2),
         ...capacityFields,
         ...localModelFields,
         ...preparedJobFields
@@ -10957,6 +11064,7 @@ var init_loop_ticks = __esm({
     init_session_spool_forwarder();
     init_rate_limit_resume_scheduler();
     init_telemetry_forwarder();
+    init_agent_auth_attestation();
     HEARTBEAT_MS = 6e4;
     DEFAULT_RESUME_SCHEDULE_SEC = 300;
     RUNNER_SUPPORTED_TASK_KINDS = Object.freeze(["code", "inference", "skill"]);
@@ -11634,10 +11742,10 @@ function formatShadowLogLine(record) {
   const loud = record.unexplained_fields?.length ? "!! " : "";
   return `${loud}[prepared-job-shadow] ${parts.join(" ")}`;
 }
-function appendShadowRecord(record, { path: path24 = PREPARED_JOB_SHADOW_SINK, append = appendFileSync, mkdir: mkdir5 = mkdirSync8 } = {}) {
+function appendShadowRecord(record, { path: path25 = PREPARED_JOB_SHADOW_SINK, append = appendFileSync, mkdir: mkdir5 = mkdirSync8 } = {}) {
   try {
-    mkdir5(dirname10(path24), { recursive: true });
-    append(path24, `${JSON.stringify(record)}
+    mkdir5(dirname10(path25), { recursive: true });
+    append(path25, `${JSON.stringify(record)}
 `, "utf8");
     return true;
   } catch {
@@ -13101,7 +13209,7 @@ function noteCiViaRest(log2) {
   log2("watch: CI status read via REST check-runs/status (gh's GraphQL rollup needs actions:read for checkSuite.workflowRun, which the read scope does not carry)");
 }
 async function readCommitCiViaRest(repo, sha, { run, env: env2 }) {
-  const api = async (path24) => JSON.parse(await run("gh", ["api", path24], { timeout: 3e4, env: env2 }) || "{}");
+  const api = async (path25) => JSON.parse(await run("gh", ["api", path25], { timeout: 3e4, env: env2 }) || "{}");
   const rollup = [];
   let total = null;
   for (let page = 1; page <= REST_MAX_PAGES && (total === null || rollup.length < total); page += 1) {
@@ -13765,9 +13873,9 @@ function buildControlHandler({ getStatus, requestStop, allowedOrigin }) {
       res.end();
       return;
     }
-    const path24 = String(req.url || "").split("?")[0];
+    const path25 = String(req.url || "").split("?")[0];
     res.setHeader("content-type", "application/json");
-    if (req.method === "GET" && path24 === "/status") {
+    if (req.method === "GET" && path25 === "/status") {
       let status;
       try {
         status = getStatus();
@@ -13778,7 +13886,7 @@ function buildControlHandler({ getStatus, requestStop, allowedOrigin }) {
       res.end(JSON.stringify({ ok: true, ...status }));
       return;
     }
-    if (req.method === "POST" && path24 === "/stop") {
+    if (req.method === "POST" && path25 === "/stop") {
       if (!isControlOriginAllowed(req.headers.origin, allowedOrigin) || !req.headers["x-vo-control"]) {
         res.statusCode = 403;
         res.end(JSON.stringify({ ok: false, error: "forbidden" }));
@@ -14813,9 +14921,9 @@ function operatorTierToRung(tier, difficulty, thresholds) {
   if (tier === "best" && difficulty >= thresholds.rungBounds.R5) return "R5";
   return base;
 }
-function readCodexModelsCache({ path: path24 = DEFAULT_CODEX_MODELS_CACHE, read = readFileSync9 } = {}) {
+function readCodexModelsCache({ path: path25 = DEFAULT_CODEX_MODELS_CACHE, read = readFileSync9 } = {}) {
   try {
-    const parsed = JSON.parse(read(path24, "utf8"));
+    const parsed = JSON.parse(read(path25, "utf8"));
     return Array.isArray(parsed?.models) ? parsed : null;
   } catch {
     return null;
@@ -15072,15 +15180,15 @@ function formatDecisionReason(decision, maxLen = 480) {
   const s = `[${decision.routerVersion}] ${decision.taskClass} d=${decision.difficulty} c=${decision.confidence} \u2192 ${decision.rung}/${decision.tier}${decision.effort ? ` effort=${decision.effort}` : ""} turns=${decision.maxTurns} $${decision.maxBudgetUsd}${decision.flags.length ? ` [${decision.flags.join(",")}]` : ""} :: ${decision.reasons.join("; ")}`;
   return s.length > maxLen ? `${s.slice(0, maxLen - 1)}\u2026` : s;
 }
-function appendDecisionFallback(decision, { path: path24 = DECISION_FALLBACK_PATH, append = appendFileSync2, mkdir: mkdir5 = mkdirSync9, task, thresholds, roleCostInputs } = {}) {
+function appendDecisionFallback(decision, { path: path25 = DECISION_FALLBACK_PATH, append = appendFileSync2, mkdir: mkdir5 = mkdirSync9, task, thresholds, roleCostInputs } = {}) {
   try {
-    mkdir5(dirname12(path24), { recursive: true });
-    append(path24, `${JSON.stringify(decision)}
+    mkdir5(dirname12(path25), { recursive: true });
+    append(path25, `${JSON.stringify(decision)}
 `, "utf8");
     if (isRouterDecision(decision)) {
       try {
         const records = buildShadowRecords({ decision, task, thresholds: thresholds || loadThresholds(), roleCostInputs });
-        for (const record of records) append(path24, `${JSON.stringify(record)}
+        for (const record of records) append(path25, `${JSON.stringify(record)}
 `, "utf8");
       } catch {
       }
@@ -15612,6 +15720,17 @@ var init_agent_process_env = __esm({
       // escape hatch inert — an operator who set it still got the subscription.
       "VO_RUNNER_PREFER_KEY",
       "VO_RUNNER_CLAUDE_PREFER_KEY",
+      // The per-MACHINE metered-billing opt-in (RUNNER_ALLOW_API_BILLING_ENV in
+      // agent-auth-attestation.mjs). Listed for the SAME reason as the line above:
+      // applyApiBillingPolicy reads it off the env handed to runAgentTask, which is
+      // this function's output — omit it and the operator's opt-in is stripped before
+      // the policy ever sees it, so `permitted` is permanently false. That fails in
+      // the SAFE direction (login), unlike #9242, but it is still an inert flag.
+      //
+      // A boolean flag, not a credential: it grants nothing on its own. The keys it
+      // gates (ANTHROPIC_API_KEY / ANTHROPIC_AUTH_TOKEN / CLAUDE_API_KEY) stay absent
+      // from this allow-list and are re-injected, if at all, only by applyAuthEnv.
+      "VO_RUNNER_ALLOW_API_BILLING",
       // The swarm tier binding (SWARM_TIER_BINDING_ENV in
       // packages/vo-mcp/src/swarm/tier-binding.ts). A fan-out resolves its billing
       // tier ONCE at admission and exports the binding so every subagent inherits
@@ -16592,7 +16711,7 @@ async function processSkillTask(client, task, cfg, {
   resolveDispatch = resolveEffortDispatch,
   checkSkillCapability = ({ runner, bin, env: capabilityEnv }) => typeof runner.checkSkillCapability === "function" ? runner.checkSkillCapability({ bin, env: capabilityEnv }) : { compatible: false, reason: "resolved runner has no restricted-skill capability probe" },
   createScratch = () => mkdtemp2(join19(tmpdir(), "algohq-skill-task-")),
-  removeScratch = (path24) => rm2(path24, { recursive: true, force: true })
+  removeScratch = (path25) => rm2(path25, { recursive: true, force: true })
 } = {}) {
   const id = task.code_task_id;
   let run = null;
@@ -17099,6 +17218,174 @@ var init_outcome_commit = __esm({
   }
 });
 
+// ../../scripts/virtual-office/code-runner/capped-run-classification.mjs
+function isCappedRunSummary(summary) {
+  return CAPPED_RESULT_SUBTYPES.includes(String(summary ?? "").trim());
+}
+function agentRequestedContinuation(run = {}) {
+  return `${run?.summary ?? ""}
+${run?.lastAgentMessage ?? ""}`.includes(PARTIAL_PR_CONTINUATION_MARKER);
+}
+function leftoverWorkAfterPublish(changedFiles) {
+  if (!Array.isArray(changedFiles)) return null;
+  return changedFiles.filter((file) => file && !isAgentScratch(String(file)));
+}
+function classifyCappedRunOutcome({
+  partial = false,
+  run = {},
+  prPublished = false,
+  prCarriesCommits = false,
+  changedFilesAfterPublish = null,
+  rateLimited = false
+} = {}) {
+  const verdict = (reason, extra = {}) => ({
+    needsContinuation: true,
+    complete: false,
+    reason,
+    note: null,
+    leftover: [],
+    ...extra
+  });
+  if (!partial) {
+    return { needsContinuation: false, complete: true, reason: "clean_finish", note: null, leftover: [] };
+  }
+  if (agentRequestedContinuation(run)) return verdict("agent_requested_continuation");
+  if (rateLimited) return verdict("rate_limited_resume_pending");
+  if (run?.failure) return verdict("runner_failure");
+  if (run?.gateFailureNote) return verdict("completion_gate_not_passing");
+  if (!isCappedRunSummary(run?.summary)) return verdict("not_a_cap_stop");
+  if (!prPublished) return verdict("no_published_pr");
+  if (!prCarriesCommits) return verdict("published_pr_carries_no_commits");
+  const leftover = leftoverWorkAfterPublish(changedFilesAfterPublish);
+  if (leftover === null) return verdict("worktree_state_unknown");
+  if (leftover.length > 0) return verdict("uncommitted_work_remains", { leftover });
+  return {
+    needsContinuation: false,
+    complete: true,
+    reason: "cap_after_publish",
+    note: CAP_AFTER_PUBLISH_NOTE,
+    leftover: []
+  };
+}
+var CAP_AFTER_PUBLISH_NOTE;
+var init_capped_run_classification = __esm({
+  "../../scripts/virtual-office/code-runner/capped-run-classification.mjs"() {
+    "use strict";
+    init_claude_result_event();
+    init_partial_pr_continuation();
+    init_publish_file_state();
+    CAP_AFTER_PUBLISH_NOTE = "cap reached after publish";
+  }
+});
+
+// ../../scripts/virtual-office/code-runner/capped-run-publication-repair.mjs
+function stripPartialTitlePrefix(title) {
+  const text = String(title ?? "").trim();
+  if (!PARTIAL_TITLE_PREFIX_RE.test(text)) return null;
+  const stripped = text.replace(PARTIAL_TITLE_PREFIX_RE, "").trim();
+  return stripped || null;
+}
+async function measureWorktreeChanges(worktreeDir, runCommand) {
+  try {
+    const out = await runCommand(
+      "git",
+      ["-c", "core.quotepath=false", "status", "--porcelain", "-z"],
+      worktreeDir,
+      { timeout: 6e4, raw: true }
+    );
+    return parsePorcelainZ(out);
+  } catch {
+    return null;
+  }
+}
+async function branchCarriesCommits(worktreeDir, branch, runCommand, base = "origin/main") {
+  if (!branch) return false;
+  try {
+    const out = await runCommand(
+      "git",
+      ["rev-list", "--count", `${base}..${branch}`],
+      worktreeDir,
+      { timeout: 6e4 }
+    );
+    return Number.parseInt(String(out).trim(), 10) > 0;
+  } catch {
+    return false;
+  }
+}
+async function resolveCappedRunVerdict({
+  partial,
+  run,
+  pr,
+  worktreeDir,
+  runCommand,
+  rateLimited = false
+}) {
+  const optimistic = classifyCappedRunOutcome({
+    partial,
+    run,
+    rateLimited,
+    prPublished: true,
+    prCarriesCommits: true,
+    changedFilesAfterPublish: []
+  });
+  if (optimistic.reason !== "cap_after_publish") return optimistic;
+  const prPublished = Number.isInteger(pr?.prNumber) && pr.prNumber > 0;
+  const [changedFilesAfterPublish, prCarriesCommits] = await Promise.all([
+    measureWorktreeChanges(worktreeDir, runCommand),
+    prPublished ? branchCarriesCommits(worktreeDir, pr.branch, runCommand) : Promise.resolve(false)
+  ]);
+  return classifyCappedRunOutcome({
+    partial: true,
+    run,
+    prPublished,
+    prCarriesCommits,
+    changedFilesAfterPublish,
+    rateLimited
+  });
+}
+async function repairCompletePrPresentation({
+  pr,
+  worktreeDir,
+  githubToken = null,
+  runCommand,
+  log: log2 = () => {
+  },
+  promoteReady = true
+}) {
+  const env2 = githubToken ? installationTokenEnv(githubToken) : void 0;
+  const result = { retitled: null, markedReady: false };
+  try {
+    const raw = await runCommand("gh", ["pr", "view", String(pr.prNumber), "--json", "title"], worktreeDir, { env: env2, timeout: 6e4 });
+    const stripped = stripPartialTitlePrefix(JSON.parse(String(raw || "{}"))?.title);
+    if (stripped) {
+      await runCommand("gh", ["pr", "edit", String(pr.prNumber), "--title", stripped], worktreeDir, { env: env2, timeout: 6e4 });
+      result.retitled = stripped;
+      log2(`task PR #${pr.prNumber}: dropped the PARTIAL title prefix \u2014 the cap landed after publication`);
+    }
+  } catch (error) {
+    log2(`PR #${pr.prNumber}: could not drop the PARTIAL title prefix (${String(error?.message || error).slice(0, 160)}); outcome is still recorded complete`);
+  }
+  if (!promoteReady) return result;
+  try {
+    await markExistingPrReady(worktreeDir, pr.prNumber, { env: env2, runFn: runCommand });
+    result.markedReady = true;
+  } catch (error) {
+    log2(`PR #${pr.prNumber}: could not promote the salvage draft to ready (${String(error?.message || error).slice(0, 160)})`);
+  }
+  return result;
+}
+var PARTIAL_TITLE_PREFIX_RE;
+var init_capped_run_publication_repair = __esm({
+  "../../scripts/virtual-office/code-runner/capped-run-publication-repair.mjs"() {
+    "use strict";
+    init_publish();
+    init_publish_file_state();
+    init_existing_pr_publication();
+    init_capped_run_classification();
+    PARTIAL_TITLE_PREFIX_RE = /^⚠ PARTIAL \([^)]*\)\s*—\s*/u;
+  }
+});
+
 // ../../scripts/virtual-office/code-runner/publication-outcome.mjs
 async function closeCancelledReplacementPr({
   pr,
@@ -17225,6 +17512,20 @@ async function finalizePublishedPr({
   const runnerFailureRecord = serializedRunnerFailure ? JSON.parse(serializedRunnerFailure) : null;
   const runnerFailureMessage = runnerFailureRecord ? `blocked by ${runnerFailureRecord.code}; operator review required: ${runnerFailureRecord.operator_next_action}` : "";
   const fixDispatchGuard = overlapBlocked || runnerFailure ? { allowFixDispatch: false } : {};
+  const exec = runCommand ?? defaultRunCommand4;
+  const capVerdict = await resolveCappedRunVerdict({
+    partial,
+    run,
+    pr,
+    worktreeDir,
+    runCommand: exec,
+    rateLimited: Boolean(rateLimitResume)
+  });
+  const reclassified = partial && capVerdict.reason === "cap_after_publish";
+  const effectivePartial = partial && !reclassified;
+  if (partial) {
+    log2(reclassified ? `task ${id}: ${CAP_AFTER_PUBLISH_NOTE} with a clean worktree \u2014 recording pr_opened, not needs_continuation` : `task ${id}: partial draft stands (${capVerdict.reason})`);
+  }
   let resumeQueued = false;
   if (cfg.watchEnabled) {
     try {
@@ -17235,8 +17536,8 @@ async function finalizePublishedPr({
         taskId: id,
         operatorId: task.operator_id,
         tenantId: task.tenant_id,
-        needsContinuation: partial && !rateLimitResume && !runnerFailure && (task.continuation_attempt ?? 0) < (task.continuation_max_attempts ?? 3),
-        continuationExhausted: partial && (task.continuation_attempt ?? 0) >= (task.continuation_max_attempts ?? 3),
+        needsContinuation: effectivePartial && !rateLimitResume && !runnerFailure && (task.continuation_attempt ?? 0) < (task.continuation_max_attempts ?? 3),
+        continuationExhausted: effectivePartial && (task.continuation_attempt ?? 0) >= (task.continuation_max_attempts ?? 3),
         repairChain: task.repair_chain ?? {
           root_pr_number: pr.prNumber,
           attempt: 0,
@@ -17293,14 +17594,19 @@ async function finalizePublishedPr({
     log: log2,
     patch: {
       status: runnerFailure ? "failed" : "pr_opened",
-      message: runnerFailure ? `${runnerFailureMessage}; preserved PR ${pr.prUrl} for owner review` : `opened ${pr.prUrl}${overlapNote}${pr.newCommit === false ? " (no new commits \u2014 the branch already held every change)" : ""}`,
+      message: runnerFailure ? `${runnerFailureMessage}; preserved PR ${pr.prUrl} for owner review` : `opened ${pr.prUrl}${overlapNote}${reclassified ? ` (${CAP_AFTER_PUBLISH_NOTE} \u2014 every deliverable is committed)` : ""}${pr.newCommit === false ? " (no new commits \u2014 the branch already held every change)" : ""}`,
       pr_url: pr.prUrl,
       pr_number: pr.prNumber,
       pr_branch: pr.branch,
       result: (() => {
         const prefix = overlapBlocked ? `[VO-PUBLISH-OVERLAP-BLOCKED: ${blockedRefs}] ` : "";
         const room = 2e3 - prefix.length;
-        return `${prefix}${partial || runnerFailure ? partialPrContinuationResult(run, room, rateLimitResume ? "rate_limited" : null) : String(run.summary).slice(0, room)}`;
+        if (reclassified) {
+          const report = String(run.lastAgentMessage || run.summary || "").trim();
+          return `${prefix}${`${CAP_AFTER_PUBLISH_NOTE}
+${report}`.slice(0, room)}`;
+        }
+        return `${prefix}${effectivePartial || runnerFailure ? partialPrContinuationResult(run, room, rateLimitResume ? "rate_limited" : null) : String(run.summary).slice(0, room)}`;
       })(),
       ...runOutcomePatch(run),
       ...terminalLedgerPatch(run)
@@ -17328,6 +17634,16 @@ async function finalizePublishedPr({
     });
     return posted.cancelled;
   }
+  if (reclassified) {
+    await repairCompletePrPresentation({
+      pr,
+      worktreeDir,
+      githubToken,
+      runCommand: exec,
+      log: log2,
+      promoteReady: !overlapBlocked && !runnerFailure
+    });
+  }
   log2(`task ${id} \u2192 PR ${pr.prUrl}`);
   return false;
 }
@@ -17345,6 +17661,8 @@ var init_publication_outcome = __esm({
     init_terminal_delivery();
     init_rate_limit_resume();
     init_error_message();
+    init_capped_run_classification();
+    init_capped_run_publication_repair();
     defaultRunCommand4 = (cmd, args, cwd, opts = {}) => runProcess2(cmd, args, { cwd, ...opts });
   }
 });
@@ -17662,6 +17980,290 @@ var init_recovery_ledger = __esm({
   }
 });
 
+// ../../scripts/virtual-office/code-runner/host-preflight.mjs
+function joinOutput(observation = {}) {
+  return [observation.stdout, observation.stderr, observation.message].map((part) => String(part ?? "")).join("\n");
+}
+function classifyGitFetchObservation(observation = {}) {
+  const text = joinOutput(observation);
+  if (GIT_AUTH_RE.test(text)) return GIT_AUTH_REQUIRED;
+  if (GIT_NETWORK_RE.test(text)) return GIT_NETWORK;
+  return GIT_OTHER;
+}
+function classifyLoginPing(observation = {}) {
+  const text = joinOutput(observation);
+  if (LOGIN_EXPIRED_RE.test(text)) return LOGIN_EXPIRED;
+  if (RATE_LIMITED_RE.test(text)) return RATE_LIMITED;
+  if (observation.ok === true && String(observation.stdout ?? "").trim().length > 0) return OK;
+  return UNKNOWN;
+}
+function reportingLines(raw) {
+  return String(raw ?? "").split(/\r?\n/u).filter((line) => line.trim() !== "" && !NON_REPORTING_LINE.test(line)).map((line) => line.trim()).filter((line) => !/[`'"]$/u.test(line));
+}
+function matchSignature(line, signatures) {
+  for (const signature of signatures) {
+    if (signature.pattern.test(line)) return signature;
+  }
+  return null;
+}
+function classifyHostFailure(text) {
+  for (const line of reportingLines(text)) {
+    const login = matchSignature(line, LOGIN_SIGNATURES);
+    if (login) return { kind: "login_expired", signature: login.id, line };
+    const git4 = matchSignature(line, GIT_SIGNATURES);
+    if (git4) return { kind: git4.kind, signature: git4.id, line };
+  }
+  return null;
+}
+function classifyHostFailureSignature(text) {
+  const value = String(text ?? "");
+  if (!value.trim()) return null;
+  const tokenMatch = new RegExp(`${HOST_ENV_FAILURE_TOKEN}:(${LOGIN_EXPIRED}|${GIT_AUTH_REQUIRED})`, "u").exec(value);
+  if (tokenMatch) return tokenMatch[1];
+  const found = classifyHostFailure(value);
+  if (!found) return null;
+  if (found.kind === "login_expired") return LOGIN_EXPIRED;
+  if (found.kind === "git_credentials") return GIT_AUTH_REQUIRED;
+  return null;
+}
+function hostFailureResultText(reason, detail = "") {
+  const trimmed = String(detail ?? "").replace(/\s+/gu, " ").trim().slice(0, 400);
+  return `${HOST_ENV_FAILURE_TOKEN}:${reason} \u2014 ${hostHealthRemedy(reason)}${trimmed ? ` [${trimmed}]` : ""}`;
+}
+function hostHealthRemedy(reason) {
+  switch (reason) {
+    case LOGIN_EXPIRED:
+      return "login expired: run claude auth login on this host";
+    case RATE_LIMITED:
+      return "agent account is rate limited: work resumes when the window resets";
+    case GIT_AUTH_REQUIRED:
+      return "git auth required: refresh the git credential on this host";
+    case GIT_NETWORK:
+      return "git cannot reach the remote: check this host network";
+    case GIT_OTHER:
+      return "git fetch failed on this host: see the runner log";
+    case UNKNOWN:
+      return "host check could not be completed";
+    default:
+      return "host is ready";
+  }
+}
+async function capture(run, cmd, args, options) {
+  try {
+    const stdout = await run(cmd, args, options);
+    return { ok: true, status: 0, stdout: String(stdout ?? ""), stderr: "", timedOut: false };
+  } catch (error) {
+    return {
+      ok: false,
+      status: typeof error?.status === "number" ? error.status : null,
+      stdout: String(error?.stdout ?? ""),
+      stderr: String(error?.stderr ?? ""),
+      message: String(error?.message ?? error ?? ""),
+      timedOut: error?.code === "ETIMEDOUT"
+    };
+  }
+}
+function nonInteractiveGitEnv(env2 = process.env) {
+  return {
+    ...env2,
+    GIT_TERMINAL_PROMPT: "0",
+    GCM_INTERACTIVE: "never",
+    GIT_OPTIONAL_LOCKS: "0"
+  };
+}
+async function checkGitFetch({
+  cwd,
+  run,
+  env: env2 = process.env,
+  remote = "origin",
+  branch = "main",
+  timeoutMs = GIT_FETCH_TIMEOUT_MS
+} = {}) {
+  if (typeof run !== "function" || !cwd) {
+    return { status: UNKNOWN, detail: "no runner clone to fetch from" };
+  }
+  const observation = await capture(run, "git", ["fetch", remote, branch], {
+    cwd,
+    timeout: timeoutMs,
+    env: nonInteractiveGitEnv(env2)
+  });
+  if (observation.ok) return { status: OK, detail: `git fetch ${remote} ${branch} succeeded` };
+  const reason = classifyGitFetchObservation(observation);
+  const raw = joinOutput(observation).replace(/\s+/gu, " ").trim();
+  return {
+    status: reason,
+    detail: observation.timedOut ? `git fetch ${remote} ${branch} exceeded ${Math.round(timeoutMs / 1e3)}s${raw ? `: ${raw.slice(0, 200)}` : " with no output"}` : raw.slice(0, 300) || `git fetch ${remote} ${branch} failed`
+  };
+}
+async function checkAgentLogin({
+  run,
+  bin = "claude",
+  env: env2 = process.env,
+  timeoutMs = LOGIN_PING_TIMEOUT_MS,
+  prompt = "Reply with the single word: ready"
+} = {}) {
+  if (typeof run !== "function") {
+    return { status: UNKNOWN, detail: "no login probe available on this host" };
+  }
+  const observation = await capture(run, bin, ["-p", prompt, "--max-turns", "1"], {
+    timeout: timeoutMs,
+    env: env2,
+    input: ""
+  });
+  const reason = classifyLoginPing(observation);
+  if (reason === OK) return { status: OK, detail: "one-turn agent ping authenticated" };
+  const raw = joinOutput(observation).replace(/\s+/gu, " ").trim();
+  return {
+    status: reason,
+    detail: observation.timedOut ? `agent ping exceeded ${Math.round(timeoutMs / 1e3)}s` : raw.slice(0, 300) || "agent ping produced no output"
+  };
+}
+function preflightAllowsClaim(health) {
+  if (!health) return true;
+  return !CLAIM_BLOCKING_GIT.has(health.git) && !CLAIM_BLOCKING_LOGIN.has(health.login);
+}
+function blockingReason(health) {
+  if (!health) return null;
+  if (CLAIM_BLOCKING_GIT.has(health.git)) return health.git;
+  if (CLAIM_BLOCKING_LOGIN.has(health.login)) return health.login;
+  return null;
+}
+async function runHostPreflight({
+  cwd,
+  runGit,
+  runAgent,
+  bin = "claude",
+  agent = "claude",
+  env: env2 = process.env,
+  now = () => Date.now(),
+  gitTimeoutMs = GIT_FETCH_TIMEOUT_MS,
+  loginTimeoutMs = LOGIN_PING_TIMEOUT_MS
+} = {}) {
+  const git4 = await checkGitFetch({ cwd, run: runGit, env: env2, timeoutMs: gitTimeoutMs });
+  const login = CLAIM_BLOCKING_GIT.has(git4.status) ? { status: UNKNOWN, detail: "skipped: git check already blocked this host" } : agent !== "claude" ? { status: UNKNOWN, detail: `login ping not implemented for agent ${agent}` } : await checkAgentLogin({ run: runAgent, bin, env: env2, timeoutMs: loginTimeoutMs });
+  const health = {
+    git: git4.status,
+    login: login.status,
+    checked_at: new Date(now()).toISOString()
+  };
+  const blocking = blockingReason(health);
+  const detail = blocking ? `${hostHealthRemedy(blocking)} \u2014 ${blocking === git4.status ? git4.detail : login.detail}` : login.status === RATE_LIMITED ? `${hostHealthRemedy(RATE_LIMITED)} \u2014 ${login.detail}` : `${git4.detail}; ${login.detail}`;
+  return { ...health, detail: detail.slice(0, 500) };
+}
+function positiveSeconds(raw, fallbackMs) {
+  const value = Number(raw);
+  return Number.isFinite(value) && value > 0 ? value * 1e3 : fallbackMs;
+}
+function makeHostPreflightGate({
+  preflight = runHostPreflight,
+  now = () => Date.now(),
+  env: env2 = process.env,
+  log: log2 = () => {
+  },
+  ...preflightOptions
+} = {}) {
+  const okIntervalMs = positiveSeconds(env2.VO_HOST_PREFLIGHT_OK_SEC, PREFLIGHT_OK_INTERVAL_MS);
+  const retryIntervalMs = positiveSeconds(env2.VO_HOST_PREFLIGHT_RETRY_SEC, PREFLIGHT_RETRY_MS);
+  let health = null;
+  let checkedAtMs = 0;
+  let running = false;
+  let lastLoggedReason;
+  const intervalMs = () => preflightAllowsClaim(health) ? okIntervalMs : retryIntervalMs;
+  return {
+    /** ms of the next scheduled check; 0 before the first one has ever run. */
+    nextCheckAt: () => checkedAtMs === 0 ? 0 : checkedAtMs + intervalMs(),
+    get: () => health,
+    allowClaim: () => preflightAllowsClaim(health),
+    blockingReason: () => blockingReason(health),
+    async ensure(nowMs = now()) {
+      if (running) return health;
+      if (checkedAtMs !== 0 && nowMs - checkedAtMs < intervalMs()) return health;
+      running = true;
+      try {
+        health = await preflight({ ...preflightOptions, env: env2, now });
+      } catch (error) {
+        health = {
+          git: UNKNOWN,
+          login: UNKNOWN,
+          checked_at: new Date(nowMs).toISOString(),
+          detail: `host preflight could not run: ${String(error?.message ?? error).slice(0, 200)}`
+        };
+        log2(`host preflight error: ${String(error?.message ?? error)}`);
+      } finally {
+        checkedAtMs = nowMs;
+        running = false;
+      }
+      const reason = blockingReason(health);
+      if (reason !== lastLoggedReason) {
+        lastLoggedReason = reason;
+        log2(reason ? `host preflight BLOCKED claiming \u2014 ${hostHealthRemedy(reason)} (${health.detail})` : "host preflight passed \u2014 git fetch and agent login are healthy");
+      }
+      return health;
+    }
+  };
+}
+var DEFAULT_BLOCKED_RECHECK_MS, DEFAULT_HEALTHY_RECHECK_MS, MAX_RECHECK_MS, GIT_FETCH_TIMEOUT_MS, LOGIN_PING_TIMEOUT_MS, PREFLIGHT_RETRY_MS, PREFLIGHT_OK_INTERVAL_MS, GIT_AUTH_REQUIRED, GIT_NETWORK, GIT_OTHER, LOGIN_EXPIRED, RATE_LIMITED, OK, UNKNOWN, HOST_ENV_FAILURE_TOKEN, CLAIM_BLOCKING_GIT, CLAIM_BLOCKING_LOGIN, GIT_AUTH_RE, GIT_NETWORK_RE, LOGIN_EXPIRED_RE, RATE_LIMITED_RE, SEVERITY_PREFIX, LOGIN_SIGNATURES, GIT_SIGNATURES, NON_REPORTING_LINE;
+var init_host_preflight = __esm({
+  "../../scripts/virtual-office/code-runner/host-preflight.mjs"() {
+    "use strict";
+    DEFAULT_BLOCKED_RECHECK_MS = 5 * 6e4;
+    DEFAULT_HEALTHY_RECHECK_MS = 30 * 6e4;
+    MAX_RECHECK_MS = 6 * 60 * 6e4;
+    GIT_FETCH_TIMEOUT_MS = 6e4;
+    LOGIN_PING_TIMEOUT_MS = 9e4;
+    PREFLIGHT_RETRY_MS = DEFAULT_BLOCKED_RECHECK_MS;
+    PREFLIGHT_OK_INTERVAL_MS = DEFAULT_HEALTHY_RECHECK_MS;
+    GIT_AUTH_REQUIRED = "git_auth_required";
+    GIT_NETWORK = "git_network";
+    GIT_OTHER = "git_other";
+    LOGIN_EXPIRED = "login_expired";
+    RATE_LIMITED = "rate_limited";
+    OK = "ok";
+    UNKNOWN = "unknown";
+    HOST_ENV_FAILURE_TOKEN = "HOST_ENV_FAILURE";
+    CLAIM_BLOCKING_GIT = /* @__PURE__ */ new Set([GIT_AUTH_REQUIRED, GIT_NETWORK, GIT_OTHER]);
+    CLAIM_BLOCKING_LOGIN = /* @__PURE__ */ new Set([LOGIN_EXPIRED]);
+    GIT_AUTH_RE = /could not read (?:Username|Password)|terminal prompts disabled|Authentication failed|authentication failed|Permission denied \(publickey\)|Invalid username or password|Support for password authentication was removed|HTTP Basic: Access denied|\b401\b|\b403\b|Logon failed|credential(?:s)? (?:helper|manager)|no credentials|Repository not found/i;
+    GIT_NETWORK_RE = /could not resolve host|couldn'?t resolve host|failed to connect|unable to access|connection (?:reset|refused|closed|timed out)|operation timed out|remote end hung up|early eof|rpc failed|recv failure|gnutls_handshake|ssl_read|\b50[234]\b|temporary failure|ETIMEDOUT|ECONNRESET|ECONNREFUSED|ENOTFOUND|EAI_AGAIN|ENETUNREACH|EHOSTUNREACH/i;
+    LOGIN_EXPIRED_RE = /OAuth (?:session|token) (?:has )?expired|could not be refreshed|Failed to authenticate|Invalid API key|invalid[^.\n]{0,24}(?:credential|authentication)|authentication_error|\bunauthorized\b|\b401\b|not (?:logged in|authenticated)|please run [`'"]?claude (?:auth )?login|run [`'"]?claude (?:auth )?login/i;
+    RATE_LIMITED_RE = /rate limit|rate[_-]limited|usage limit|\b429\b|too many requests|quota (?:exceeded|exhausted)|limit reached|out of (?:credits|quota)|resource[_ ]exhausted/i;
+    SEVERITY_PREFIX = String.raw`(?:\[?(?:error|Error|ERROR)\]?:?\s+)?`;
+    LOGIN_SIGNATURES = [
+      {
+        id: "oauth_session_expired",
+        pattern: new RegExp(
+          `^${SEVERITY_PREFIX}Failed to authenticate: OAuth session expired and could not be refreshed\\.?$`,
+          "u"
+        )
+      },
+      {
+        id: "invalid_credentials",
+        pattern: new RegExp(`^${SEVERITY_PREFIX}Invalid authentication credentials\\.?$`, "u")
+      }
+    ];
+    GIT_SIGNATURES = [
+      {
+        id: "git_fetch_timeout",
+        kind: "git_unreachable",
+        pattern: new RegExp(
+          `^${SEVERITY_PREFIX}git fetch origin main failed: timed out\\.?$`,
+          "u"
+        )
+      },
+      {
+        // fatal: could not read Username for 'https://github.com': terminal prompts disabled
+        id: "git_credential_prompt",
+        kind: "git_credentials",
+        pattern: new RegExp(
+          String.raw`^fatal:\s+could not read (?:Username|Password) for '[^']*':\s*` + String.raw`(?:terminal prompts disabled|No such device or address|Device not configured)\.?$`,
+          "u"
+        )
+      }
+    ];
+    NON_REPORTING_LINE = /^\s*(?:[+\->*#|]|\/\/|\/\*|\*\/|\d+[.)]\s|`{1,3}|'|")/u;
+  }
+});
+
 // ../../scripts/virtual-office/code-runner/no-changes-terminal-status.mjs
 function defaultRunCommand5(cmd, args, cwd, opts = {}) {
   return runProcess2(cmd, args, { cwd, ...opts });
@@ -17683,6 +18285,14 @@ function isMaxTurnExhaustion(run = {}, maxTurns) {
 }
 function decideNoChangesTerminalStatus({ partial, run = {}, maxTurns } = {}) {
   const structuredFailure = serializeRunnerFailure(run.failure);
+  const hostFailure = classifyHostFailureSignature(run.summary) ?? classifyHostFailureSignature(structuredFailure);
+  if (hostFailure) {
+    return {
+      status: "failed",
+      message: `host cannot run work \u2014 ${hostHealthRemedy(hostFailure)}`,
+      result: hostFailureResultText(hostFailure, run.summary).slice(0, RESULT_LIMIT)
+    };
+  }
   if (!partial) {
     if (structuredFailure) {
       const failure = JSON.parse(structuredFailure);
@@ -17851,6 +18461,7 @@ var init_no_changes_terminal_status = __esm({
     init_terminal_delivery();
     init_error_message();
     init_partial_pr_continuation();
+    init_host_preflight();
     RESULT_LIMIT = 2e3;
   }
 });
@@ -18047,6 +18658,72 @@ var init_task_worktree_preparation = __esm({
   }
 });
 
+// ../../scripts/virtual-office/code-runner/preflight-clone-dir.mjs
+import fs14 from "node:fs";
+import path24 from "node:path";
+function sanitize2(value, fallback) {
+  const cleaned = String(value || "").trim().toLowerCase().replace(/[^a-z0-9._-]+/g, "-").replace(/^-+|-+$/g, "");
+  return cleaned || fallback;
+}
+function cloneDirForServedRepo(repoSlug, clonesRootDir) {
+  if (!clonesRootDir || !path24.isAbsolute(String(clonesRootDir))) return null;
+  if (!repoSlug || !VALID_REPO_SLUG2.test(String(repoSlug))) return null;
+  const [owner, name] = String(repoSlug).split("/");
+  if (owner === "." || owner === ".." || name === "." || name === "..") return null;
+  if (owner.startsWith("-") || name.startsWith("-")) return null;
+  return path24.join(clonesRootDir, `${sanitize2(owner, "owner")}__${sanitize2(name, "repo")}`);
+}
+function resolvePreflightCwd(cfg = {}, env2 = process.env) {
+  const clonesRoot2 = String(env2?.VO_CODE_RUNNER_CLONES_ROOT || "").trim();
+  const served = Array.isArray(cfg?.servedRepos) ? cfg.servedRepos : [];
+  for (const repo of served) {
+    const dir = cloneDirForServedRepo(repo, clonesRoot2);
+    if (dir) return dir;
+  }
+  return String(env2?.VO_CODE_RUNNER_REPO || "").trim() || process.cwd();
+}
+function isGitWorkingTree(dir, { exists = fs14.existsSync } = {}) {
+  if (!dir) return false;
+  try {
+    return exists(path24.join(dir, ".git")) === true;
+  } catch {
+    return false;
+  }
+}
+function describeMissingClone(health, dir) {
+  const note = `no git clone at ${dir} yet \u2014 the first task creates it; git fetch not probed`;
+  if (!health) return health;
+  if (blockingReason(health)) return { ...health, git: UNKNOWN };
+  return { ...health, git: UNKNOWN, detail: `${note}; ${health.detail ?? ""}`.slice(0, 500) };
+}
+function makeServedClonePreflight({
+  cfg = {},
+  preflight = runHostPreflight,
+  exists = fs14.existsSync
+} = {}) {
+  return async function servedClonePreflight(options = {}) {
+    const env2 = options.env ?? process.env;
+    const dir = resolvePreflightCwd(cfg, env2);
+    if (!isGitWorkingTree(dir, { exists })) {
+      return describeMissingClone(await preflight({ ...options, cwd: null }), dir);
+    }
+    const health = await preflight({ ...options, cwd: dir });
+    if (health && blockingReason(health) === health.git && NOT_A_REPOSITORY_RE.test(String(health.detail ?? ""))) {
+      return describeMissingClone(await preflight({ ...options, cwd: null }), dir);
+    }
+    return health;
+  };
+}
+var VALID_REPO_SLUG2, NOT_A_REPOSITORY_RE;
+var init_preflight_clone_dir = __esm({
+  "../../scripts/virtual-office/code-runner/preflight-clone-dir.mjs"() {
+    "use strict";
+    init_host_preflight();
+    VALID_REPO_SLUG2 = /^[A-Za-z0-9._-]+\/[A-Za-z0-9._-]+$/u;
+    NOT_A_REPOSITORY_RE = /not a git repository|does not appear to be a git repos/iu;
+  }
+});
+
 // ../../scripts/virtual-office/code-runner-daemon.mjs
 var code_runner_daemon_exports = {};
 __export(code_runner_daemon_exports, {
@@ -18142,6 +18819,8 @@ async function processOneTask(client, task, cfg, runnerInstanceId, swarmAdmissio
       env: buildAgentProcessEnv(process.env, { agent: sel.agent, runnerId: cfg.runnerId, taskId: id, repo: task.repo, githubReadToken: agentGithubReadToken, swarmAdmission }),
       // swarmAdmission mints VO_SWARM_TIER_BINDING: ONE tier decision for this task's whole agent tree
       sandbox,
+      allowApiBilling: task.allow_api_billing === true,
+      // per-TASK grant; AND-ed with the per-machine VO_RUNNER_ALLOW_API_BILLING inside applyApiBillingPolicy
       onProgress: (text, checkpoint) => {
         const usage = checkpoint?.tokenUsage ? { token_usage: checkpoint.tokenUsage } : {};
         const patch = text ? runnerStagePatch("agent_working", text, usage) : { stage: "agent_working", ...usage };
@@ -18372,7 +19051,8 @@ async function main({ env: env2 = process.env, once: once2 = false } = {}) {
   const agentAvailability = makeAgentAvailabilityProvider({ onError: (e) => log(`agent probe failed: ${e.message}`) });
   await agentAvailability.ready();
   const accountUsage = makeAccountUsageProvider();
-  const loopTick = makeLoopTicks({ client, cfg, env: env2, log, getActive: () => active, runnerInstanceId, capacityController, localModelController: createLocalModelRemoteController({ env: env2, log }), preparedJobController: createPreparedJobRemoteController({ log }), getAgentAvailability: () => agentAvailability.get(), getAccountUsage: () => accountUsage.get() });
+  const hostGate = makeHostPreflightGate({ preflight: makeServedClonePreflight({ cfg }), runGit: runProcess2, runAgent: runProcess2, bin: cfg.runnerBin, agent: cfg.agent, env: env2, log });
+  const loopTick = makeLoopTicks({ client, cfg, env: env2, log, getActive: () => active, runnerInstanceId, capacityController, localModelController: createLocalModelRemoteController({ env: env2, log }), preparedJobController: createPreparedJobRemoteController({ log }), getAgentAvailability: () => agentAvailability.get(), getAccountUsage: () => accountUsage.get(), getHostHealth: () => hostGate.get() });
   const backoff = makeReconnectBackoff({ baseMs: cfg.pollSec * 1e3, log });
   let detachedFlushRunning = false;
   while (!stopping) {
@@ -18382,9 +19062,10 @@ async function main({ env: env2 = process.env, once: once2 = false } = {}) {
         detachedFlushRunning = false;
       });
     }
+    await hostGate.ensure();
     const heartbeatCompletion = loopTick();
     if (watchCyclesEnabled) watchCoordinator.start();
-    const claimAgents = resolveAgentClaimContext(agentAvailability, cfg.agent);
+    const claimAgents = hostGate.allowClaim() ? resolveAgentClaimContext(agentAvailability, cfg.agent) : null;
     if (!claimAgents) {
       await heartbeatCompletion;
       await sleep2(cfg.pollSec * 1e3);
@@ -18401,7 +19082,7 @@ async function main({ env: env2 = process.env, once: once2 = false } = {}) {
     }
     let task;
     try {
-      task = await client.claim(cfg.runnerId, cfg.servedRepos, cfg.servedOperators, { runnerInstanceId, reconcileStale, ...claimAgents });
+      task = await client.claim(cfg.runnerId, cfg.servedRepos, cfg.servedOperators, { runnerInstanceId, reconcileStale, ...claimAgents, agentAuthSource: resolveRunnerAttestedAuthSource(process.env) });
       reconcileStale = false;
       backoff.onSuccess();
     } catch (err) {
@@ -18421,6 +19102,7 @@ async function main({ env: env2 = process.env, once: once2 = false } = {}) {
       continue;
     }
     log(`claimed task ${task.code_task_id} (${task.repo})`);
+    log(`task ${task.code_task_id} ${describeTaskAuthSource(process.env, task)}`);
     active += 1;
     activeTaskIds.add(task.code_task_id);
     const runTask = selectTaskProcessor(task, {
@@ -18493,6 +19175,7 @@ var init_code_runner_daemon = __esm({
     init_task_helpers();
     init_prepared_job_shadow();
     init_agent_process_env();
+    init_agent_auth_attestation();
     init_sandbox_config();
     init_inference_task_runner();
     init_skill_task_runner();
@@ -18510,6 +19193,9 @@ var init_code_runner_daemon = __esm({
     init_daemon_config();
     init_publication_scope();
     init_task_worktree_preparation();
+    init_process_runner2();
+    init_host_preflight();
+    init_preflight_clone_dir();
     init_detached_economics_spool();
     RATE_LIMIT_RESUME_ENABLED = process.env.VO_RATE_LIMIT_RESUME !== "0";
     sleep2 = (ms) => new Promise((r) => setTimeout(r, ms));