@gobing-ai/spur 0.3.24 → 0.3.25

package/spur.js

@@ -47,7 +47,7 @@ var __export = (target, all) => {
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = import.meta.require;
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.4.11/node_modules/@gobing-ai/ts-utils/dist/errors.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.4.14/node_modules/@gobing-ai/ts-utils/dist/errors.js
 var ErrorCode;
 var init_errors = __esm(() => {
   ErrorCode = {
@@ -58,7 +58,7 @@ var init_errors = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.4.11/node_modules/@gobing-ai/ts-utils/dist/api-response.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.4.14/node_modules/@gobing-ai/ts-utils/dist/api-response.js
 var API_ERROR_CODES, ERROR_CODE_TO_HTTP, CLIENT_SAFE_CODES;
 var init_api_response = __esm(() => {
   init_errors();
@@ -81,10 +81,10 @@ var init_api_response = __esm(() => {
   CLIENT_SAFE_CODES = new Set([ErrorCode.NotFound, ErrorCode.Validation, ErrorCode.Conflict]);
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.4.11/node_modules/@gobing-ai/ts-utils/dist/cursor.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.4.14/node_modules/@gobing-ai/ts-utils/dist/cursor.js
 var init_cursor = () => {};
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.4.11/node_modules/@gobing-ai/ts-utils/dist/object.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.4.14/node_modules/@gobing-ai/ts-utils/dist/object.js
 function isPlainObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -100,7 +100,7 @@ function deepMerge(target, source) {
   return result;
 }
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.4.11/node_modules/@gobing-ai/ts-utils/dist/output.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.4.14/node_modules/@gobing-ai/ts-utils/dist/output.js
 function processStream(name) {
   const proc = globalThis.process;
   const stream = proc?.[name];
@@ -121,7 +121,7 @@ function echoError(message, target = defaultStderrTarget ?? processStream("stder
 }
 var defaultStdoutTarget, defaultStderrTarget;
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.4.11/node_modules/@gobing-ai/ts-utils/dist/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.4.14/node_modules/@gobing-ai/ts-utils/dist/index.js
 var init_dist = __esm(() => {
   init_api_response();
   init_cursor();
@@ -21743,7 +21743,7 @@ var init_zod = __esm(() => {
   init_external();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+92240aa39452d4a9/node_modules/@gobing-ai/ts-runtime/dist/config.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+c51d44ed7d8b072c/node_modules/@gobing-ai/ts-runtime/dist/config.js
 function getProcessEnv() {
   return process.env;
 }
@@ -21821,7 +21821,7 @@ var init_config = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+92240aa39452d4a9/node_modules/@gobing-ai/ts-runtime/dist/file-system-node.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+c51d44ed7d8b072c/node_modules/@gobing-ai/ts-runtime/dist/file-system-node.js
 import { appendFileSync, cpSync, createReadStream, createWriteStream, existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "fs";
 import { dirname, resolve as resolvePath } from "path";
 function createNodeFileSystem(root) {
@@ -21908,7 +21908,7 @@ function findProjectRoot(startDir) {
 }
 var init_file_system_node = () => {};
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+92240aa39452d4a9/node_modules/@gobing-ai/ts-runtime/dist/db-errors.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+c51d44ed7d8b072c/node_modules/@gobing-ai/ts-runtime/dist/db-errors.js
 var DbModuleNotInstalledError;
 var init_db_errors = __esm(() => {
   DbModuleNotInstalledError = class DbModuleNotInstalledError extends Error {
@@ -29099,7 +29099,7 @@ var init_execa = __esm(() => {
   } = getIpcExport());
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+92240aa39452d4a9/node_modules/@gobing-ai/ts-runtime/dist/process-executor.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+c51d44ed7d8b072c/node_modules/@gobing-ai/ts-runtime/dist/process-executor.js
 import { isatty } from "tty";
 
 class NodeProcessExecutor {
@@ -29141,7 +29141,11 @@ class NodeProcessExecutor {
       ...options.label !== undefined ? { label: options.label } : {}
     });
     try {
-      const result = await execa(options.command, args, execaOptions);
+      const subprocess = execa(options.command, args, execaOptions);
+      const stopGroupCancellation = observeProcessGroupCancellation(subprocess, options.signal);
+      observeOutput(subprocess.stdout, "stdout", options.onOutput);
+      observeOutput(subprocess.stderr, "stderr", options.onOutput);
+      const result = await subprocess.finally(stopGroupCancellation);
       const processResult = {
         command: options.command,
         args,
@@ -29367,9 +29371,42 @@ function buildExecaOptions(opts) {
     ...opts.env !== undefined ? { env: opts.env } : {},
     ...opts.timeout !== undefined ? { timeout: opts.timeout } : {},
     ...opts.maxOutput !== undefined ? { maxBuffer: opts.maxOutput } : {},
-    ...opts.signal !== undefined ? { cancelSignal: opts.signal } : {}
+    ...opts.signal !== undefined ? {
+      cancelSignal: opts.signal,
+      ...process.platform !== "win32" ? { detached: true } : {}
+    } : {}
   };
 }
+function observeProcessGroupCancellation(subprocess, signal) {
+  const pid = subprocess.pid;
+  if (signal === undefined || process.platform === "win32" || pid === undefined)
+    return () => {};
+  const abort = () => {
+    try {
+      process.kill(-pid, "SIGTERM");
+    } catch {
+      subprocess.kill("SIGTERM");
+    }
+  };
+  if (signal.aborted)
+    abort();
+  else
+    signal.addEventListener("abort", abort, { once: true });
+  return () => signal.removeEventListener("abort", abort);
+}
+function observeOutput(stream, name, observer) {
+  if (!stream || !observer)
+    return;
+  stream.on("data", (chunk) => {
+    try {
+      observer({
+        stream: name,
+        chunk: asString(chunk),
+        timestamp: new Date().toISOString()
+      });
+    } catch {}
+  });
+}
 function asString(value) {
   if (typeof value === "string")
     return value;
@@ -29392,7 +29429,7 @@ var init_process_executor = __esm(() => {
   init_execa();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+92240aa39452d4a9/node_modules/@gobing-ai/ts-runtime/dist/runtime-node-bun.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+c51d44ed7d8b072c/node_modules/@gobing-ai/ts-runtime/dist/runtime-node-bun.js
 function getNodeFileSystem() {
   if (!_nodeFileSystem)
     _nodeFileSystem = createNodeFileSystem();
@@ -29452,7 +29489,7 @@ var init_runtime_node_bun = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+92240aa39452d4a9/node_modules/@gobing-ai/ts-runtime/dist/context.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+c51d44ed7d8b072c/node_modules/@gobing-ai/ts-runtime/dist/context.js
 class RuntimeContext {
   scope;
   runtimeName;
@@ -29522,7 +29559,7 @@ var init_context = __esm(() => {
   init_runtime_node_bun();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+92240aa39452d4a9/node_modules/@gobing-ai/ts-runtime/dist/path.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+c51d44ed7d8b072c/node_modules/@gobing-ai/ts-runtime/dist/path.js
 function normalizeSeparators(path6) {
   return path6.replaceAll("\\", "/");
 }
@@ -29583,17 +29620,17 @@ var init_path = __esm(() => {
   SEP = globalThis.process?.platform === "win32" ? "\\" : "/";
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+92240aa39452d4a9/node_modules/@gobing-ai/ts-runtime/dist/schema-validation.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+c51d44ed7d8b072c/node_modules/@gobing-ai/ts-runtime/dist/schema-validation.js
 var REMOTE_SCHEMA_MAX_BYTES;
 var init_schema_validation = __esm(() => {
   init_dist2();
   REMOTE_SCHEMA_MAX_BYTES = 5 * 1024 * 1024;
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+92240aa39452d4a9/node_modules/@gobing-ai/ts-runtime/dist/types.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+c51d44ed7d8b072c/node_modules/@gobing-ai/ts-runtime/dist/types.js
 var init_types = () => {};
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+92240aa39452d4a9/node_modules/@gobing-ai/ts-runtime/dist/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+c51d44ed7d8b072c/node_modules/@gobing-ai/ts-runtime/dist/index.js
 var init_dist3 = __esm(() => {
   init_config();
   init_context();
@@ -29602,7 +29639,7 @@ var init_dist3 = __esm(() => {
   init_types();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+92240aa39452d4a9/node_modules/@gobing-ai/ts-runtime/dist/bun-sqlite.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+c51d44ed7d8b072c/node_modules/@gobing-ai/ts-runtime/dist/bun-sqlite.js
 import { Database } from "bun:sqlite";
 var init_bun_sqlite = () => {};
 
@@ -33794,7 +33831,7 @@ var init_bun_sqlite2 = __esm(() => {
   init_session2();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.11+3ced2785cbe4d5ed/node_modules/@gobing-ai/ts-db/dist/schema/inbox-messages.js
+// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.14+eb0d628435e6547b/node_modules/@gobing-ai/ts-db/dist/schema/inbox-messages.js
 var inboxMessages;
 var init_inbox_messages = __esm(() => {
   init_sqlite_core();
@@ -33813,7 +33850,7 @@ var init_inbox_messages = __esm(() => {
   }, (table2) => [index("idx_inbox_messages_to_status").on(table2.toId, table2.status)]);
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.11+3ced2785cbe4d5ed/node_modules/@gobing-ai/ts-db/dist/schema/common.js
+// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.14+eb0d628435e6547b/node_modules/@gobing-ai/ts-db/dist/schema/common.js
 function nowTimestamp() {
   return Date.now();
 }
@@ -33842,7 +33879,7 @@ var init_common3 = __esm(() => {
   appendOnlyColumns = buildAppendOnlyColumns();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.11+3ced2785cbe4d5ed/node_modules/@gobing-ai/ts-db/dist/schema/queue-jobs.js
+// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.14+eb0d628435e6547b/node_modules/@gobing-ai/ts-db/dist/schema/queue-jobs.js
 var queueJobs;
 var init_queue_jobs = __esm(() => {
   init_sqlite_core();
@@ -33862,7 +33899,7 @@ var init_queue_jobs = __esm(() => {
   }, (table2) => [index("queue_jobs_ready_idx").on(table2.status, table2.nextRetryAt, table2.createdAt)]);
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.11+3ced2785cbe4d5ed/node_modules/@gobing-ai/ts-db/dist/schema/runtime.js
+// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.14+eb0d628435e6547b/node_modules/@gobing-ai/ts-db/dist/schema/runtime.js
 var exports_runtime = {};
 __export(exports_runtime, {
   queueJobs: () => queueJobs,
@@ -33873,7 +33910,7 @@ var init_runtime = __esm(() => {
   init_queue_jobs();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.11+3ced2785cbe4d5ed/node_modules/@gobing-ai/ts-db/dist/adapters/bun-sqlite.js
+// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.14+eb0d628435e6547b/node_modules/@gobing-ai/ts-db/dist/adapters/bun-sqlite.js
 var exports_bun_sqlite = {};
 __export(exports_bun_sqlite, {
   BunSqliteAdapter: () => BunSqliteAdapter
@@ -34162,7 +34199,7 @@ var init_d1 = __esm(() => {
   init_session3();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.11+3ced2785cbe4d5ed/node_modules/@gobing-ai/ts-db/dist/adapters/d1.js
+// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.14+eb0d628435e6547b/node_modules/@gobing-ai/ts-db/dist/adapters/d1.js
 var exports_d1 = {};
 __export(exports_d1, {
   D1Adapter: () => D1Adapter
@@ -34226,7 +34263,7 @@ var init_d12 = __esm(() => {
   init_runtime();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.11+3ced2785cbe4d5ed/node_modules/@gobing-ai/ts-db/dist/adapter.js
+// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.14+eb0d628435e6547b/node_modules/@gobing-ai/ts-db/dist/adapter.js
 async function createDbAdapter(config3) {
   switch (config3.driver) {
     case "bun-sqlite": {
@@ -34266,7 +34303,7 @@ var init_drizzle_orm = __esm(() => {
   init_view_common();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.11+3ced2785cbe4d5ed/node_modules/@gobing-ai/ts-db/dist/query-spec.js
+// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.14+eb0d628435e6547b/node_modules/@gobing-ai/ts-db/dist/query-spec.js
 function compilePredicate(predicate) {
   if ("and" in predicate) {
     const parts = predicate.and.map(compilePredicate).filter((p) => p !== undefined);
@@ -34304,7 +34341,7 @@ var init_query_spec = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.11+3ced2785cbe4d5ed/node_modules/@gobing-ai/ts-db/dist/base-dao.js
+// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.14+eb0d628435e6547b/node_modules/@gobing-ai/ts-db/dist/base-dao.js
 function asSelectQuery(query) {
   return query;
 }
@@ -34346,7 +34383,7 @@ var init_base_dao = __esm(() => {
   init_query_spec();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.11+3ced2785cbe4d5ed/node_modules/@gobing-ai/ts-db/dist/embedded-migrations.js
+// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.14+eb0d628435e6547b/node_modules/@gobing-ai/ts-db/dist/embedded-migrations.js
 var embeddedMigrations;
 var init_embedded_migrations = __esm(() => {
   embeddedMigrations = [
@@ -34378,7 +34415,7 @@ var init_embedded_migrations = __esm(() => {
   ];
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.11+3ced2785cbe4d5ed/node_modules/@gobing-ai/ts-db/dist/entity-dao.js
+// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.14+eb0d628435e6547b/node_modules/@gobing-ai/ts-db/dist/entity-dao.js
 var EntityDao;
 var init_entity_dao = __esm(() => {
   init_drizzle_orm();
@@ -34540,7 +34577,7 @@ var init_entity_dao = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.11+3ced2785cbe4d5ed/node_modules/@gobing-ai/ts-db/dist/inbox-message-dao.js
+// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.14+eb0d628435e6547b/node_modules/@gobing-ai/ts-db/dist/inbox-message-dao.js
 function isPromiseLike(value) {
   return value !== null && (typeof value === "object" || typeof value === "function") && typeof value.then === "function";
 }
@@ -34713,7 +34750,7 @@ var init_migrator2 = __esm(() => {
   init_migrator();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.11+3ced2785cbe4d5ed/node_modules/@gobing-ai/ts-db/dist/migrate.js
+// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.14+eb0d628435e6547b/node_modules/@gobing-ai/ts-db/dist/migrate.js
 async function ensureJournalTable(adapter, table3) {
   await adapter.exec(`CREATE TABLE IF NOT EXISTS "${table3}" (` + "id INTEGER PRIMARY KEY AUTOINCREMENT, " + "hash text NOT NULL, " + "created_at numeric" + ")");
 }
@@ -34788,7 +34825,7 @@ var init_migrate = __esm(() => {
   init_embedded_migrations();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.11+3ced2785cbe4d5ed/node_modules/@gobing-ai/ts-db/dist/queue-job-dao.js
+// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.14+eb0d628435e6547b/node_modules/@gobing-ai/ts-db/dist/queue-job-dao.js
 var QueueJobDao;
 var init_queue_job_dao = __esm(() => {
   init_drizzle_orm();
@@ -34929,7 +34966,7 @@ var init_queue_job_dao = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.11+3ced2785cbe4d5ed/node_modules/@gobing-ai/ts-db/dist/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.14+eb0d628435e6547b/node_modules/@gobing-ai/ts-db/dist/index.js
 var exports_dist = {};
 __export(exports_dist, {
   embeddedMigrations: () => embeddedMigrations,
@@ -37111,7 +37148,8 @@ var init_finding_codes = __esm(() => {
     "L4.uncovered-feature-scenario",
     "L4.verifying-incomplete-tasks",
     "L4.dogfood-missing",
-    "L4.scenario-unverified"
+    "L4.scenario-unverified",
+    "L4.stale-line-anchor"
   ];
   FINDING_CODES = {
     L1_MARKDOWN_PARSE: "L1.markdown-parse",
@@ -37154,7 +37192,8 @@ var init_finding_codes = __esm(() => {
     L4_UNCOVERED_FEATURE_SCENARIO: "L4.uncovered-feature-scenario",
     L4_VERIFYING_INCOMPLETE_TASKS: "L4.verifying-incomplete-tasks",
     L4_DOGFOOD_MISSING: "L4.dogfood-missing",
-    L4_SCENARIO_UNVERIFIED: "L4.scenario-unverified"
+    L4_SCENARIO_UNVERIFIED: "L4.scenario-unverified",
+    L4_STALE_LINE_ANCHOR: "L4.stale-line-anchor"
   };
 });
 
@@ -37162,6 +37201,9 @@ var init_finding_codes = __esm(() => {
 function folderPathWithDefault(defaultPath) {
   return exports_external.preprocess((v) => v == null ? undefined : v, exports_external.string().default(defaultPath));
 }
+function normalizeExecutorTier(value) {
+  return value === "capable" ? "capable-1" : value;
+}
 function normalizeMember(member) {
   return typeof member === "string" ? { executor: member } : { ...member };
 }
@@ -37202,7 +37244,7 @@ function buildConfigFromEnv(env = process.env) {
     }
   });
 }
-var SPUR_ENV_VARS, SPUR_LOG_LEVELS, DEFAULT_TASKS_DIR = "docs/tasks", DEFAULT_FEATURES_DIR = "docs/features", DEFAULT_DATABASE_URL = ".spur/spur.db", IN_MEMORY_DATABASE_URL = ":memory:", folderConfigSchema, tasksConfigSchema, featuresConfigSchema, AgentExecutorConfigSchema, AGENT_ID_REGEX, TeamMemberConfigSchema, TeamConfigSchema, AgentConfigSchema, RulesConfigSchema, WorkflowsConfigSchema, RedactionConfigSchema, spurConfigSchema, configSchema2;
+var SPUR_ENV_VARS, SPUR_LOG_LEVELS, DEFAULT_TASKS_DIR = "docs/tasks", DEFAULT_FEATURES_DIR = "docs/features", DEFAULT_DATABASE_URL = ".spur/spur.db", IN_MEMORY_DATABASE_URL = ":memory:", folderConfigSchema, tasksConfigSchema, featuresConfigSchema, EXECUTOR_CAPABILITY_TIERS, executorCapabilityTierSchema, AgentExecutorConfigSchema, AGENT_ID_REGEX, TeamMemberConfigSchema, TeamConfigSchema, AgentConfigSchema, RulesConfigSchema, WorkflowsConfigSchema, RedactionConfigSchema, spurConfigSchema, configSchema2;
 var init_src = __esm(() => {
   init_zod();
   init_finding_codes();
@@ -37238,11 +37280,17 @@ var init_src = __esm(() => {
   featuresConfigSchema = exports_external.object({
     dir: folderPathWithDefault(DEFAULT_FEATURES_DIR)
   });
+  EXECUTOR_CAPABILITY_TIERS = ["cheap", "standard", "capable-1", "capable-2", "capable-3"];
+  executorCapabilityTierSchema = exports_external.preprocess((value) => {
+    if (value === undefined || value === null)
+      return;
+    return normalizeExecutorTier(value);
+  }, exports_external.enum(EXECUTOR_CAPABILITY_TIERS).optional());
   AgentExecutorConfigSchema = exports_external.object({
     name: exports_external.string().min(1),
     agent: exports_external.string().min(1),
     model: exports_external.string().min(1).optional(),
-    tier: exports_external.enum(["cheap", "standard", "capable"]).optional()
+    tier: executorCapabilityTierSchema.optional()
   });
   AGENT_ID_REGEX = /^[a-z][a-z0-9_-]{1,63}$/;
   TeamMemberConfigSchema = exports_external.union([
@@ -37360,7 +37408,7 @@ var init_src = __esm(() => {
   });
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+b7f415af47cc46d8/node_modules/@gobing-ai/ts-runtime/dist/config.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+1afbae169bbe5102/node_modules/@gobing-ai/ts-runtime/dist/config.js
 function parseYamlObject(text3) {
   let parsed;
   try {
@@ -37487,7 +37535,7 @@ var init_config2 = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+b7f415af47cc46d8/node_modules/@gobing-ai/ts-runtime/dist/file-system-node.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+1afbae169bbe5102/node_modules/@gobing-ai/ts-runtime/dist/file-system-node.js
 import { appendFileSync as appendFileSync3, cpSync as cpSync2, createReadStream as createReadStream3, createWriteStream as createWriteStream3, existsSync as existsSync2, mkdirSync as mkdirSync2, readdirSync as readdirSync2, readFileSync as readFileSync4, realpathSync as realpathSync2, renameSync as renameSync2, rmSync as rmSync2, statSync as statSync3, writeFileSync as writeFileSync3 } from "fs";
 import { dirname as dirname2, resolve as resolvePath3 } from "path";
 function createNodeFileSystem3(root) {
@@ -37574,7 +37622,7 @@ function findProjectRoot3(startDir) {
 }
 var init_file_system_node2 = () => {};
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+b7f415af47cc46d8/node_modules/@gobing-ai/ts-runtime/dist/db-errors.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+1afbae169bbe5102/node_modules/@gobing-ai/ts-runtime/dist/db-errors.js
 var D1NotConfiguredError2, DbModuleNotInstalledError3;
 var init_db_errors2 = __esm(() => {
   D1NotConfiguredError2 = class D1NotConfiguredError2 extends Error {
@@ -37591,7 +37639,7 @@ var init_db_errors2 = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+b7f415af47cc46d8/node_modules/@gobing-ai/ts-runtime/dist/file-system-cf.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+1afbae169bbe5102/node_modules/@gobing-ai/ts-runtime/dist/file-system-cf.js
 function createCfFileSystem2() {
   return {
     getProjectRoot: () => "/bundle",
@@ -37630,7 +37678,7 @@ function createCfFileSystem2() {
 }
 var UNSUPPORTED = "FileSystem is not available on Cloudflare Workers. Use D1, KV, or R2 for persistent storage.";
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+b7f415af47cc46d8/node_modules/@gobing-ai/ts-runtime/dist/runtime-cf.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+1afbae169bbe5102/node_modules/@gobing-ai/ts-runtime/dist/runtime-cf.js
 var exports_runtime_cf = {};
 __export(exports_runtime_cf, {
   cloudflareWorkersFactory: () => cloudflareWorkersFactory2
@@ -37668,7 +37716,7 @@ var init_runtime_cf = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+b7f415af47cc46d8/node_modules/@gobing-ai/ts-runtime/dist/process-executor.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+1afbae169bbe5102/node_modules/@gobing-ai/ts-runtime/dist/process-executor.js
 import { isatty as isatty2 } from "tty";
 
 class NodeProcessExecutor3 {
@@ -37710,7 +37758,11 @@ class NodeProcessExecutor3 {
       ...options.label !== undefined ? { label: options.label } : {}
     });
     try {
-      const result = await execa(options.command, args, execaOptions);
+      const subprocess = execa(options.command, args, execaOptions);
+      const stopGroupCancellation = observeProcessGroupCancellation2(subprocess, options.signal);
+      observeOutput2(subprocess.stdout, "stdout", options.onOutput);
+      observeOutput2(subprocess.stderr, "stderr", options.onOutput);
+      const result = await subprocess.finally(stopGroupCancellation);
       const processResult = {
         command: options.command,
         args,
@@ -37976,9 +38028,42 @@ function buildExecaOptions2(opts) {
     ...opts.env !== undefined ? { env: opts.env } : {},
     ...opts.timeout !== undefined ? { timeout: opts.timeout } : {},
     ...opts.maxOutput !== undefined ? { maxBuffer: opts.maxOutput } : {},
-    ...opts.signal !== undefined ? { cancelSignal: opts.signal } : {}
+    ...opts.signal !== undefined ? {
+      cancelSignal: opts.signal,
+      ...process.platform !== "win32" ? { detached: true } : {}
+    } : {}
   };
 }
+function observeProcessGroupCancellation2(subprocess, signal) {
+  const pid = subprocess.pid;
+  if (signal === undefined || process.platform === "win32" || pid === undefined)
+    return () => {};
+  const abort = () => {
+    try {
+      process.kill(-pid, "SIGTERM");
+    } catch {
+      subprocess.kill("SIGTERM");
+    }
+  };
+  if (signal.aborted)
+    abort();
+  else
+    signal.addEventListener("abort", abort, { once: true });
+  return () => signal.removeEventListener("abort", abort);
+}
+function observeOutput2(stream, name, observer) {
+  if (!stream || !observer)
+    return;
+  stream.on("data", (chunk) => {
+    try {
+      observer({
+        stream: name,
+        chunk: asString2(chunk),
+        timestamp: new Date().toISOString()
+      });
+    } catch {}
+  });
+}
 function asString2(value) {
   if (typeof value === "string")
     return value;
@@ -38008,7 +38093,7 @@ var init_process_executor2 = __esm(() => {
   ProcessExecutor2 = NodeProcessExecutor3;
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+b7f415af47cc46d8/node_modules/@gobing-ai/ts-runtime/dist/runtime-node-bun.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+1afbae169bbe5102/node_modules/@gobing-ai/ts-runtime/dist/runtime-node-bun.js
 var exports_runtime_node_bun = {};
 __export(exports_runtime_node_bun, {
   nodeBunFactory: () => nodeBunFactory3,
@@ -38076,7 +38161,7 @@ var init_runtime_node_bun2 = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+b7f415af47cc46d8/node_modules/@gobing-ai/ts-runtime/dist/platform.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+1afbae169bbe5102/node_modules/@gobing-ai/ts-runtime/dist/platform.js
 function isCloudflareWorkerRuntime2() {
   return globalThis.navigator?.userAgent?.startsWith("Cloudflare-Workers") ?? false;
 }
@@ -38106,7 +38191,7 @@ function _resetRuntimeFactory2() {
 }
 var _factory, _runtimeName;
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+b7f415af47cc46d8/node_modules/@gobing-ai/ts-runtime/dist/context.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+1afbae169bbe5102/node_modules/@gobing-ai/ts-runtime/dist/context.js
 class RuntimeContext2 {
   scope;
   runtimeName;
@@ -38196,7 +38281,7 @@ var init_context2 = __esm(() => {
   init_runtime_node_bun2();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+b7f415af47cc46d8/node_modules/@gobing-ai/ts-runtime/dist/path.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+1afbae169bbe5102/node_modules/@gobing-ai/ts-runtime/dist/path.js
 function normalizeSeparators2(path7) {
   return path7.replaceAll("\\", "/");
 }
@@ -38319,7 +38404,7 @@ var init_path2 = __esm(() => {
   SEP2 = globalThis.process?.platform === "win32" ? "\\" : "/";
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+b7f415af47cc46d8/node_modules/@gobing-ai/ts-runtime/dist/fs.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+1afbae169bbe5102/node_modules/@gobing-ai/ts-runtime/dist/fs.js
 async function ensureDirForFile2(path7, fs2 = createNodeFileSystem3()) {
   await fs2.ensureDir(dirnamePath(path7));
 }
@@ -38370,7 +38455,7 @@ var init_fs = __esm(() => {
   init_path2();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+b7f415af47cc46d8/node_modules/@gobing-ai/ts-runtime/dist/process-registry.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+1afbae169bbe5102/node_modules/@gobing-ai/ts-runtime/dist/process-registry.js
 function allocateId() {
   nextIdSeq += 1;
   return `pe_${Date.now().toString(36)}_${nextIdSeq.toString(36)}`;
@@ -38494,7 +38579,7 @@ function createInMemoryProcessRegistry2(options) {
 }
 var nextIdSeq = 0;
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+b7f415af47cc46d8/node_modules/@gobing-ai/ts-runtime/dist/schema-validation.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+1afbae169bbe5102/node_modules/@gobing-ai/ts-runtime/dist/schema-validation.js
 async function loadStructuredConfig(path7, options = {}) {
   const content = await (options.fileSystem ?? createNodeFileSystem3()).readFile(path7);
   return await parseStructuredConfig(content, path7, options);
@@ -38771,10 +38856,10 @@ var init_schema_validation2 = __esm(() => {
   defaultResolve = typeof Bun !== "undefined" ? (specifier, from) => Bun.resolveSync(specifier, from) : undefined;
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+b7f415af47cc46d8/node_modules/@gobing-ai/ts-runtime/dist/types.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+1afbae169bbe5102/node_modules/@gobing-ai/ts-runtime/dist/types.js
 var init_types2 = () => {};
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+b7f415af47cc46d8/node_modules/@gobing-ai/ts-runtime/dist/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+1afbae169bbe5102/node_modules/@gobing-ai/ts-runtime/dist/index.js
 var exports_dist2 = {};
 __export(exports_dist2, {
   writeJsonFile: () => writeJsonFile2,
@@ -40923,7 +41008,7 @@ var init_mod = __esm(() => {
   init_config3();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/logger.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/logger.js
 function toLogTapeLevel(level) {
   return level === "warn" ? "warning" : level;
 }
@@ -42476,7 +42561,7 @@ var require_src = __commonJS((exports) => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/telemetry/sdk.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/telemetry/sdk.js
 function getTelemetryConfig(configPartial = {}) {
   return {
     enabled: configPartial.enabled ?? CONFIG_DEFAULTS.enabled,
@@ -42512,7 +42597,7 @@ var init_sdk = __esm(() => {
   resolvedConfig = getTelemetryConfig();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/telemetry/tracing.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/telemetry/tracing.js
 function isSuppressed(tracer2) {
   return tracer2 === undefined && !getResolvedConfig().enabled;
 }
@@ -42552,7 +42637,7 @@ var init_tracing2 = __esm(() => {
   import_api2 = __toESM(require_src(), 1);
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/telemetry/metrics.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/telemetry/metrics.js
 function getMeter() {
   return import_api3.metrics.getMeter(METER_NAME, METER_VERSION);
 }
@@ -42649,7 +42734,7 @@ var init_metrics = __esm(() => {
   instruments = {};
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/event-bus/event-bus.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/event-bus/event-bus.js
 function busLogger() {
   if (!_busLogger)
     _busLogger = getLogger2("event-bus");
@@ -42894,7 +42979,7 @@ var init_event_bus = __esm(() => {
   init_metrics();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/event-bus/default-observers.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/event-bus/default-observers.js
 function obsLogger() {
   if (!_obsLogger)
     _obsLogger = getLogger2("event-bus.observers");
@@ -42958,7 +43043,7 @@ var init_default_observers = __esm(() => {
   init_event_bus();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/event-bus/file-observer.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/event-bus/file-observer.js
 function parentDir(filePath) {
   const idx = filePath.lastIndexOf("/");
   return idx <= 0 ? "." : filePath.slice(0, idx);
@@ -43056,7 +43141,7 @@ var init_file_observer = __esm(() => {
   init_logger3();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/scheduler/node.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/scheduler/node.js
 function parseInterval(cron) {
   const trimmed = cron.trim();
   const num = Number(trimmed);
@@ -43130,7 +43215,7 @@ var init_node3 = __esm(() => {
   init_metrics();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/scheduler-node.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/scheduler-node.js
 var exports_scheduler_node = {};
 __export(exports_scheduler_node, {
   NodeSchedulerAdapter: () => NodeSchedulerAdapter
@@ -49386,6 +49471,168 @@ var init_errors5 = __esm(() => {
   };
 });
 
+// ../../packages/app/src/observability/agent-execution.ts
+class AgentExecutionLifecycle {
+  observer;
+  secrets;
+  heartbeatMs;
+  sequence = 0;
+  correlation;
+  queue = [];
+  draining = false;
+  dropped = 0;
+  heartbeat;
+  startedAt = 0;
+  timeoutMs;
+  outputCarry = { stdout: "", stderr: "" };
+  constructor(observer, correlation, secrets, heartbeatMs = 30000) {
+    this.observer = observer;
+    this.secrets = secrets;
+    this.heartbeatMs = heartbeatMs;
+    this.correlation = correlation ?? {
+      runId: crypto.randomUUID(),
+      executionId: crypto.randomUUID()
+    };
+  }
+  get identity() {
+    return this.correlation;
+  }
+  start(detail) {
+    this.startedAt = Date.now();
+    this.timeoutMs = detail.timeoutMs;
+    this.emit({
+      kind: "started",
+      agent: redactAndBound(detail.agent, this.secrets, 256),
+      ...detail.model !== undefined ? { model: redactAndBound(detail.model, this.secrets, 256) } : {},
+      invocation: redactAndBound(detail.invocation, this.secrets, 512),
+      ...detail.timeoutMs !== undefined ? { timeoutMs: detail.timeoutMs } : {}
+    });
+    if (!this.observer || this.heartbeatMs <= 0)
+      return;
+    this.heartbeat = setInterval(() => {
+      this.drain();
+      this.emit({
+        kind: "heartbeat",
+        elapsedMs: Math.max(0, Date.now() - this.startedAt),
+        ...this.timeoutMs !== undefined ? { timeoutMs: this.timeoutMs } : {}
+      });
+    }, this.heartbeatMs);
+    this.heartbeat.unref?.();
+  }
+  observe(output2) {
+    if (!this.observer)
+      return;
+    const combined = this.outputCarry[output2.stream] + output2.chunk;
+    const { ready, carry } = redactStreamingValue(combined, this.secrets);
+    this.outputCarry[output2.stream] = carry;
+    if (ready === "")
+      return;
+    this.enqueueOutput(output2.stream, ready);
+  }
+  finish(detail) {
+    if (this.heartbeat !== undefined)
+      clearInterval(this.heartbeat);
+    this.heartbeat = undefined;
+    for (const stream of ["stdout", "stderr"]) {
+      const carry = this.outputCarry[stream];
+      this.outputCarry[stream] = "";
+      if (carry !== "")
+        this.enqueueOutput(stream, redactAndBound(carry, this.secrets, MAX_CHUNK_CHARS));
+    }
+    this.drain();
+    if (this.dropped > 0) {
+      this.emit({ kind: "dropped", chunks: this.dropped });
+      this.dropped = 0;
+    }
+    const cancelled = detail.signal !== undefined || detail.reason === "cancelled";
+    this.emit({
+      kind: "finished",
+      outcome: cancelled ? "cancelled" : detail.exitCode === 0 ? "done" : "failed",
+      exitCode: detail.exitCode,
+      durationMs: detail.durationMs,
+      ...detail.signal !== undefined ? { signal: detail.signal } : {},
+      usage: "unavailable",
+      ...detail.reason !== undefined ? { reason: redactAndBound(detail.reason, this.secrets, 512) } : {}
+    });
+  }
+  enqueueOutput(stream, chunk) {
+    if (this.queue.length >= MAX_PENDING_CHUNKS) {
+      this.dropped += 1;
+      return;
+    }
+    this.queue.push(this.makeEvent({
+      kind: "output",
+      stream,
+      chunk: redactAndBound(chunk, this.secrets, MAX_CHUNK_CHARS)
+    }));
+    this.scheduleDrain();
+  }
+  scheduleDrain() {
+    if (this.draining)
+      return;
+    this.draining = true;
+    queueMicrotask(() => this.drain());
+  }
+  drain() {
+    this.draining = false;
+    while (this.queue.length > 0) {
+      const event = this.queue.shift();
+      if (event !== undefined)
+        this.deliver(event);
+    }
+  }
+  emit(detail) {
+    this.deliver(this.makeEvent(detail));
+  }
+  makeEvent(detail) {
+    this.sequence += 1;
+    return {
+      ...detail,
+      schemaVersion: 1,
+      eventId: crypto.randomUUID(),
+      sequence: this.sequence,
+      runId: this.correlation.runId,
+      executionId: this.correlation.executionId,
+      ...this.correlation.actionId !== undefined ? { actionId: this.correlation.actionId } : {},
+      at: new Date().toISOString()
+    };
+  }
+  deliver(event) {
+    try {
+      this.observer?.(event);
+    } catch {}
+  }
+}
+function configuredSecretValues(env) {
+  return Object.entries(env).filter(([key, value]) => /(?:secret|token|password|api[_-]?key|credential)/i.test(key) && (value?.length ?? 0) >= 4).map(([, value]) => value);
+}
+function redactAndBound(value, secrets, maxChars) {
+  let redacted = value.replace(SECRET_PATTERN, "[REDACTED]");
+  for (const secret of secrets) {
+    if (secret !== "")
+      redacted = redacted.split(secret).join("[REDACTED]");
+  }
+  return redacted.length <= maxChars ? redacted : `${redacted.slice(0, maxChars)}\u2026`;
+}
+function redactStreamingValue(value, secrets) {
+  const redacted = redactAndBound(value, secrets, Number.MAX_SAFE_INTEGER);
+  let carryLength = 0;
+  for (const secret of secrets) {
+    for (let length = 1;length < secret.length && length <= redacted.length; length += 1) {
+      if (redacted.endsWith(secret.slice(0, length)))
+        carryLength = Math.max(carryLength, length);
+    }
+  }
+  return {
+    ready: carryLength === 0 ? redacted : redacted.slice(0, -carryLength),
+    carry: carryLength === 0 ? "" : redacted.slice(-carryLength)
+  };
+}
+var MAX_CHUNK_CHARS = 4096, MAX_PENDING_CHUNKS = 64, SECRET_PATTERN;
+var init_agent_execution = __esm(() => {
+  SECRET_PATTERN = /(?:sk-[a-z0-9_-]{8,}|(?:api[_-]?key|token|secret|password)\s*[:=]\s*\S+|bearer\s+\S+)/gi;
+});
+
 // ../../packages/domain/src/analytics/models.ts
 function resolvePricing(model) {
   if (model === undefined || model.length === 0)
@@ -50663,7 +50910,7 @@ var init_drizzle_zod = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.11+3ced2785cbe4d5ed/node_modules/@gobing-ai/ts-db/dist/schema/drizzle-internals.js
+// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.14+eb0d628435e6547b/node_modules/@gobing-ai/ts-db/dist/schema/drizzle-internals.js
 function sqlExpressionToText(value) {
   if (typeof value !== "object" || value === null || !("queryChunks" in value)) {
     return;
@@ -50686,7 +50933,7 @@ function getDrizzleTableName(table3) {
   return String(table3[nameSym]);
 }
 
-// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.11+3ced2785cbe4d5ed/node_modules/@gobing-ai/ts-db/dist/schema/ddl.js
+// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.14+eb0d628435e6547b/node_modules/@gobing-ai/ts-db/dist/schema/ddl.js
 function quoteIdent(name) {
   return `"${name.replace(/"/g, '""')}"`;
 }
@@ -50780,7 +51027,7 @@ var init_ddl = __esm(() => {
   init_sqlite_core();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.11+3ced2785cbe4d5ed/node_modules/@gobing-ai/ts-db/dist/schema/define-table.js
+// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.14+eb0d628435e6547b/node_modules/@gobing-ai/ts-db/dist/schema/define-table.js
 function defineTable(name, columns2) {
   const table3 = sqliteTable(name, columns2);
   let insert2;
@@ -50814,7 +51061,7 @@ var init_define_table = __esm(() => {
   init_ddl();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.11+3ced2785cbe4d5ed/node_modules/@gobing-ai/ts-db/dist/schema/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-db@0.4.14+eb0d628435e6547b/node_modules/@gobing-ai/ts-db/dist/schema/index.js
 var init_schema = __esm(() => {
   init_sqlite_core();
   init_define_table();
@@ -51143,6 +51390,15 @@ var init_run_dao = __esm(() => {
     stampMetadata(runId, metadata) {
       return this.adapter.run("UPDATE runs SET metadata_json = ? WHERE id = ?", JSON.stringify(metadata), runId);
     }
+    stampFailureReason(runId, reason) {
+      return this.adapter.run(`UPDATE runs
+             SET metadata_json = json_set(
+                 COALESCE(NULLIF(metadata_json, ''), '{}'),
+                 '$.failureReason',
+                 ?1
+             )
+             WHERE id = ?2`, reason, runId);
+    }
     listStaleRuns(cutoffIso) {
       return this.adapter.queryAll(`SELECT id, status, started_at
              FROM runs
@@ -51390,7 +51646,7 @@ var init_dao = __esm(() => {
   init_workspace_dao();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/errors.js
+// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/errors.js
 var WorkflowValidationError, FSMError, RunCollisionError, WorkflowResumeError;
 var init_errors6 = __esm(() => {
   WorkflowValidationError = class WorkflowValidationError extends Error {
@@ -51425,12 +51681,12 @@ var init_errors6 = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/event-bus/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/event-bus/index.js
 var init_event_bus2 = __esm(() => {
   init_event_bus();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/api-client.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/api-client.js
 function sanitizeUrlForObservability(url2) {
   try {
     const parsed = new URL(url2);
@@ -51660,12 +51916,12 @@ var init_api_client = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/telemetry/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/telemetry/index.js
 var init_telemetry = __esm(() => {
   init_tracing2();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/index.js
 var init_dist6 = __esm(() => {
   init_api_client();
   init_event_bus2();
@@ -51673,7 +51929,7 @@ var init_dist6 = __esm(() => {
   init_telemetry();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/run-lifecycle.js
+// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/run-lifecycle.js
 function runtimeBuiltins(workflowName, stateOrNodeId, runId, transitionsTaken, mode) {
   return {
     workflow: workflowName,
@@ -51746,9 +52002,12 @@ class RunLifecycle {
       return await loop(lifecycle);
     }, { attributes: { "workflow.name": workflowName, "workflow.mode": mode } });
   }
-  async enter(stateOrNodeId, transitionsTaken, persist = true) {
+  async enter(stateOrNodeId, transitionsTaken, persist = true, vars) {
     if (persist) {
-      await this.persistence.saveWorkflowState(this.runId, stateOrNodeId, { transitionsTaken });
+      const data = { transitionsTaken };
+      if (vars !== undefined)
+        data.effectiveVars = vars;
+      await this.persistence.saveWorkflowState(this.runId, stateOrNodeId, data);
       await this.persistence.savePhase(this.runId, stateOrNodeId, "running");
     }
     addSpanEvent("workflow.node.enter", {
@@ -51762,8 +52021,11 @@ class RunLifecycle {
       transitionsTaken
     });
   }
-  async commitHop(from, to, trigger, transitionsTaken, phase) {
-    await this.persistence.commitTransition(this.runId, from, to, trigger, to, { transitionsTaken }, phase);
+  async commitHop(from, to, trigger, transitionsTaken, phase, vars) {
+    const data = { transitionsTaken };
+    if (vars !== undefined)
+      data.effectiveVars = vars;
+    await this.persistence.commitTransition(this.runId, from, to, trigger, to, data, phase);
     addSpanEvent("workflow.node.transition", {
       runId: this.runId,
       from,
@@ -51820,7 +52082,11 @@ class RunLifecycle {
     this.logger.warn("workflow run failed", { finalState, transitionsTaken, reason });
     return this.result("failed", finalState, transitionsTaken, reason);
   }
-  async pause(stateOrNodeId, transitionsTaken) {
+  async pause(stateOrNodeId, transitionsTaken, vars) {
+    const data = { transitionsTaken };
+    if (vars !== undefined)
+      data.effectiveVars = vars;
+    await this.persistence.saveWorkflowState(this.runId, stateOrNodeId, data);
     await this.persistence.savePhase(this.runId, stateOrNodeId, "paused");
     await this.persistence.finalizeRun(this.runId, "paused", new Date().toISOString());
     this.logger.info("workflow run paused", { stateOrNodeId, transitionsTaken });
@@ -51922,7 +52188,7 @@ var init_run_lifecycle = __esm(() => {
   ];
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/schema.js
+// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/schema.js
 var RESERVED_VAR_NAMES, IDENTIFIER, VarsSchema, EnvSchema, ActionDefSchema, GuardDefSchema, StateMachineWorkflowDefSchema, TransitionFlowWorkflowDefSchema, WorkflowDefSchema;
 var init_schema2 = __esm(() => {
   init_zod();
@@ -52006,7 +52272,7 @@ var init_schema2 = __esm(() => {
   WorkflowDefSchema = exports_external.union([StateMachineWorkflowDefSchema, TransitionFlowWorkflowDefSchema]);
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/config.js
+// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/config.js
 async function loadWorkflowDef(path9, options = {}) {
   return parseWorkflowDef(await loadStructuredConfig(path9, options), path9);
 }
@@ -52165,7 +52431,7 @@ var init_config4 = __esm(() => {
   RUNTIME_TEMPLATE_NAMESPACES = new Set(RUNTIME_BUILTIN_KEYS);
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+b7f415af47cc46d8/node_modules/@gobing-ai/ts-runtime/dist/extension/capability-registry.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+1afbae169bbe5102/node_modules/@gobing-ai/ts-runtime/dist/extension/capability-registry.js
 class CapabilityRegistry {
   kind;
   capabilities = new Map;
@@ -52196,7 +52462,7 @@ class CapabilityRegistry {
   }
 }
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+b7f415af47cc46d8/node_modules/@gobing-ai/ts-runtime/dist/extension/extension-path.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+1afbae169bbe5102/node_modules/@gobing-ai/ts-runtime/dist/extension/extension-path.js
 function assertRelativeExtensionPath(path9, options = {}) {
   const where = options.sourceName !== undefined ? ` declared by "${options.sourceName}"` : "";
   if (/^([/\\]|[A-Za-z]:[/\\])/.test(path9)) {
@@ -52207,20 +52473,20 @@ function assertRelativeExtensionPath(path9, options = {}) {
   }
 }
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+b7f415af47cc46d8/node_modules/@gobing-ai/ts-runtime/dist/extension/extension-loader.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+1afbae169bbe5102/node_modules/@gobing-ai/ts-runtime/dist/extension/extension-loader.js
 var init_extension_loader = () => {};
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+b7f415af47cc46d8/node_modules/@gobing-ai/ts-runtime/dist/extension/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+1afbae169bbe5102/node_modules/@gobing-ai/ts-runtime/dist/extension/index.js
 var init_extension = __esm(() => {
   init_extension_loader();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.11+b7f415af47cc46d8/node_modules/@gobing-ai/ts-runtime/dist/extension.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.14+1afbae169bbe5102/node_modules/@gobing-ai/ts-runtime/dist/extension.js
 var init_extension2 = __esm(() => {
   init_extension();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/host.js
+// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/host.js
 class WorkflowEngineHost {
   lifecycleBus;
   actions = new CapabilityRegistry("workflow action");
@@ -52389,7 +52655,7 @@ var init_host = __esm(() => {
   init_errors6();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/schema-sql.js
+// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/schema-sql.js
 var WORKFLOW_ENGINE_SCHEMA_SQL;
 var init_schema_sql = __esm(() => {
   WORKFLOW_ENGINE_SCHEMA_SQL = `
@@ -52462,7 +52728,7 @@ CREATE TABLE IF NOT EXISTS action_runs (
 `.trim();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/persistence.js
+// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/persistence.js
 async function applyWorkflowEngineSchema(db2) {
   for (const statement of WORKFLOW_ENGINE_SCHEMA_SQL.split(";")) {
     const sql4 = statement.trim();
@@ -52614,6 +52880,21 @@ class DbWorkflowPersistenceAdapter {
     const row = await this.db.queryFirst("SELECT state FROM workflow_states WHERE run_id = ? ORDER BY created_at DESC, rowid DESC LIMIT 1", runId);
     return row?.state;
   }
+  async loadLatestStateSnapshot(runId) {
+    await this.ensureSchema();
+    const row = await this.db.queryFirst("SELECT state, data_json FROM workflow_states WHERE run_id = ? ORDER BY created_at DESC, rowid DESC LIMIT 1", runId);
+    if (row == null)
+      return;
+    let data = {};
+    if (row.data_json !== null && row.data_json.length > 0) {
+      try {
+        data = JSON.parse(row.data_json);
+      } catch {
+        data = {};
+      }
+    }
+    return { state: row.state, data };
+  }
   async listPausedRuns(options) {
     await this.ensureSchema();
     const where = ["status = 'paused'"];
@@ -52716,6 +52997,12 @@ class MemoryWorkflowPersistenceAdapter {
     const last = this.states.findLast((s) => s.runId === runId);
     return last?.state;
   }
+  async loadLatestStateSnapshot(runId) {
+    const last = this.states.findLast((s) => s.runId === runId);
+    if (last === undefined)
+      return;
+    return { state: last.state, data: last.data };
+  }
   async listPausedRuns(options) {
     let runs2 = [...this.runs.values()].filter((r) => r.status === "paused");
     if (options?.workflowName !== undefined) {
@@ -52730,7 +53017,7 @@ var init_persistence = __esm(() => {
   init_schema_sql();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/variables.js
+// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/variables.js
 function mergeVars(workflowVars = {}, overrideVars = {}) {
   return { ...workflowVars, ...overrideVars };
 }
@@ -52790,7 +53077,7 @@ var init_variables = __esm(() => {
   TEMPLATE_REF = /\$\{([^}]+)\}/g;
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/action-step.js
+// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/action-step.js
 async function runActionStep(action, vars, deps) {
   const { host, persistence, lifecycle, stateOrNodeId, runId } = deps;
   const resolved = resolveTemplates(action.options ?? {}, {
@@ -52805,6 +53092,7 @@ async function runActionStep(action, vars, deps) {
   try {
     result = await host.runAction(action.kind, resolved, {
       runId,
+      actionId,
       workdir: deps.options.workdir,
       stateOrNodeId,
       vars,
@@ -52847,7 +53135,7 @@ var init_action_step = __esm(() => {
   init_variables();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/state-machine.js
+// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/state-machine.js
 class StateMachineDriver {
   options;
   constructor(options) {
@@ -52881,7 +53169,7 @@ class StateMachineDriver {
         isResume = false;
         persistedViaHop = true;
       } else {
-        await lifecycle.enter(current.id, transitionsTaken, !persistedViaHop);
+        await lifecycle.enter(current.id, transitionsTaken, !persistedViaHop, vars);
         const enter = options.dryRun ? EMPTY_OUTCOME : await runActionSequence(current.onEnter ?? [], vars, {
           host: this.options.host,
           persistence: this.options.persistence,
@@ -52906,7 +53194,7 @@ class StateMachineDriver {
           return await lifecycle.fail(current.id, transitionsTaken, lastActionResult?.error);
         }
         if (current.pause === true) {
-          return await lifecycle.pause(current.id, transitionsTaken);
+          return await lifecycle.pause(current.id, transitionsTaken, vars);
         }
       }
       const outbound = workflow.transitions.filter((transition) => transition.from === current?.id);
@@ -52945,7 +53233,7 @@ class StateMachineDriver {
       await lifecycle.commitHop(current.id, nextTransition.to, nextTransition.trigger ?? null, transitionsTaken, {
         phase: nextTransition.to,
         status: "running"
-      });
+      }, vars);
       if (transitionsTaken > iterationBound) {
         return await lifecycle.fail(current.id, transitionsTaken, "iteration-bound-exceeded");
       }
@@ -52981,7 +53269,7 @@ var init_state_machine = __esm(() => {
   EMPTY_OUTCOME = { outcome: "completed", result: undefined };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/transition-flow.js
+// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/transition-flow.js
 class TransitionFlowDriver {
   options;
   constructor(options) {
@@ -53015,7 +53303,7 @@ class TransitionFlowDriver {
         isResume = false;
         persistedViaHop = true;
       } else {
-        await lifecycle.enter(current.id, transitionsTaken, !persistedViaHop);
+        await lifecycle.enter(current.id, transitionsTaken, !persistedViaHop, vars);
         if (options.dryRun) {
           if (current.action !== undefined) {
             lastActionResult = undefined;
@@ -53045,7 +53333,7 @@ class TransitionFlowDriver {
           }
         }
         if (current.pause === true) {
-          return await lifecycle.pause(current.id, transitionsTaken);
+          return await lifecycle.pause(current.id, transitionsTaken, vars);
         }
       }
       const outbound = workflow.edges.filter((edge2) => edge2.from === current?.id);
@@ -53065,7 +53353,7 @@ class TransitionFlowDriver {
       await lifecycle.commitHop(current.id, edge.to, edge.condition?.kind ?? null, transitionsTaken, {
         phase: edge.to,
         status: "running"
-      });
+      }, vars);
       if (transitionsTaken > iterationBound) {
         return await lifecycle.fail(current.id, transitionsTaken, "iteration-bound-exceeded");
       }
@@ -53099,7 +53387,7 @@ var init_transition_flow = __esm(() => {
   init_variables();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/service.js
+// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/service.js
 class WorkflowService {
   host;
   persistence;
@@ -53189,20 +53477,24 @@ class WorkflowService {
     if (currentState === undefined) {
       throw new WorkflowResumeError(`Run "${runId}" has no persisted state to resume from`);
     }
+    const snapshot = await this.persistence.loadLatestStateSnapshot(runId);
+    const persistedVars = extractEffectiveVars(snapshot?.data);
+    const restoredVars = mergeVars(persistedVars, options?.vars);
+    const mergedOptions = { ...options, vars: restoredVars };
     const extKey = run.external_key ?? undefined;
     await this.persistence.finalizeRun(runId, "running", "");
-    const events = this.resolveEvents(options?.events);
+    const events = this.resolveEvents(mergedOptions.events);
     events?.emit("workflow.run.resumed", { runId, node: currentState, externalKey: extKey });
     if (workflow.kind === "transition-flow") {
       return await new TransitionFlowDriver({
         host: this.host,
         persistence: this.persistence
-      }).resume(workflow, runId, currentState, extKey, { ...options, events });
+      }).resume(workflow, runId, currentState, extKey, mergedOptions);
     }
     return await new StateMachineDriver({
       host: this.host,
       persistence: this.persistence
-    }).resume(workflow, runId, currentState, extKey, { ...options, events });
+    }).resume(workflow, runId, currentState, extKey, mergedOptions);
   }
   async listPausedRuns(options) {
     return await this.persistence.listPausedRuns(options);
@@ -53287,6 +53579,21 @@ class WorkflowService {
     return { allowed: false, ...denial };
   }
 }
+function extractEffectiveVars(data) {
+  if (data === undefined)
+    return {};
+  const raw = data.effectiveVars;
+  if (raw === undefined || raw === null)
+    return {};
+  if (typeof raw !== "object")
+    return {};
+  const filtered = {};
+  for (const [key, value] of Object.entries(raw)) {
+    if (typeof value === "string")
+      filtered[key] = value;
+  }
+  return filtered;
+}
 var init_service = __esm(() => {
   init_dist6();
   init_config4();
@@ -53297,7 +53604,7 @@ var init_service = __esm(() => {
   init_variables();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-dual-workflow-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-dual-workflow-engine/dist/index.js
 var init_dist7 = __esm(() => {
   init_config4();
   init_host();
@@ -53306,7 +53613,7 @@ var init_dist7 = __esm(() => {
   init_service();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-llm-jsonl-importer@0.4.11+d5c29f764bf0e6e0/node_modules/@gobing-ai/ts-llm-jsonl-importer/dist/errors.js
+// ../../node_modules/.bun/@gobing-ai+ts-llm-jsonl-importer@0.4.14+d5c29f764bf0e6e0/node_modules/@gobing-ai/ts-llm-jsonl-importer/dist/errors.js
 var HistoryImportError;
 var init_errors7 = __esm(() => {
   HistoryImportError = class HistoryImportError extends Error {
@@ -53319,7 +53626,7 @@ var init_errors7 = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-llm-jsonl-importer@0.4.11+d5c29f764bf0e6e0/node_modules/@gobing-ai/ts-llm-jsonl-importer/dist/hash.js
+// ../../node_modules/.bun/@gobing-ai+ts-llm-jsonl-importer@0.4.14+d5c29f764bf0e6e0/node_modules/@gobing-ai/ts-llm-jsonl-importer/dist/hash.js
 import { createHash } from "crypto";
 function stableJson(value) {
   if (Array.isArray(value)) {
@@ -53336,7 +53643,7 @@ function sha256(value) {
 }
 var init_hash = () => {};
 
-// ../../node_modules/.bun/@gobing-ai+ts-llm-jsonl-importer@0.4.11+d5c29f764bf0e6e0/node_modules/@gobing-ai/ts-llm-jsonl-importer/dist/redaction.js
+// ../../node_modules/.bun/@gobing-ai+ts-llm-jsonl-importer@0.4.14+d5c29f764bf0e6e0/node_modules/@gobing-ai/ts-llm-jsonl-importer/dist/redaction.js
 function redactValue(value, rules = DEFAULT_REDACTION_RULES) {
   if (typeof value === "string") {
     return rules.reduce((current, rule) => current.replace(rule.pattern, rule.replacement), value);
@@ -53373,7 +53680,7 @@ var init_redaction = __esm(() => {
   ];
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-llm-jsonl-importer@0.4.11+d5c29f764bf0e6e0/node_modules/@gobing-ai/ts-llm-jsonl-importer/dist/schema-sql.js
+// ../../node_modules/.bun/@gobing-ai+ts-llm-jsonl-importer@0.4.14+d5c29f764bf0e6e0/node_modules/@gobing-ai/ts-llm-jsonl-importer/dist/schema-sql.js
 var HISTORY_IMPORT_SCHEMA_SQL;
 var init_schema_sql2 = __esm(() => {
   HISTORY_IMPORT_SCHEMA_SQL = `
@@ -53460,7 +53767,7 @@ CREATE TABLE IF NOT EXISTS history_etl_openclaw (
 `.trim();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-llm-jsonl-importer@0.4.11+d5c29f764bf0e6e0/node_modules/@gobing-ai/ts-llm-jsonl-importer/dist/sources.js
+// ../../node_modules/.bun/@gobing-ai+ts-llm-jsonl-importer@0.4.14+d5c29f764bf0e6e0/node_modules/@gobing-ai/ts-llm-jsonl-importer/dist/sources.js
 function firstString(...values) {
   for (const value of values) {
     if (typeof value === "string" && value.length > 0)
@@ -53548,7 +53855,7 @@ var init_sources = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-llm-jsonl-importer@0.4.11+d5c29f764bf0e6e0/node_modules/@gobing-ai/ts-llm-jsonl-importer/dist/importer.js
+// ../../node_modules/.bun/@gobing-ai+ts-llm-jsonl-importer@0.4.14+d5c29f764bf0e6e0/node_modules/@gobing-ai/ts-llm-jsonl-importer/dist/importer.js
 async function applyHistoryImportSchema(db2) {
   for (const statement of HISTORY_IMPORT_SCHEMA_SQL.split(";")) {
     const sql4 = statement.trim();
@@ -53785,13 +54092,13 @@ var init_importer = __esm(() => {
   VALID_TABLE_NAME = /^history_etl_[a-z_]+$/;
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-llm-jsonl-importer@0.4.11+d5c29f764bf0e6e0/node_modules/@gobing-ai/ts-llm-jsonl-importer/dist/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-llm-jsonl-importer@0.4.14+d5c29f764bf0e6e0/node_modules/@gobing-ai/ts-llm-jsonl-importer/dist/index.js
 var init_dist8 = __esm(() => {
   init_importer();
   init_schema_sql2();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/config/extensions.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/config/extensions.js
 function collectExtensions(sourceName, sourceDir, extensions) {
   if (extensions === undefined)
     return [];
@@ -53807,7 +54114,7 @@ var init_extensions = __esm(() => {
   init_dist5();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/types.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/types.js
 function createFinding(rule, message, filePath, extras = {}) {
   return {
     ruleId: rule.id,
@@ -53878,7 +54185,7 @@ var init_types3 = __esm(() => {
   });
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/config/loader.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/config/loader.js
 async function loadPreset(name, options) {
   const merged = await buildMergedRoots(options.roots.map((root) => resolvePath4(root)), options.fileSystem);
   const presetPath = findMergedPreset(merged, name);
@@ -54093,7 +54400,7 @@ var init_loader2 = __esm(() => {
   FIX_MODE_AUTHORITY = { none: 0, suggest: 1, auto: 2 };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/fixers/test-stub-fixer.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/fixers/test-stub-fixer.js
 function normalizeFindingPath(filePath) {
   if (!filePath || isAbsolutePath2(filePath))
     return null;
@@ -54158,7 +54465,7 @@ var init_test_stub_fixer = __esm(() => {
   realFileSystem = createNodeFileSystem3();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/fixers/fixers.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/fixers/fixers.js
 function registerBuiltinFixers(host, exec) {
   const regexFixer = new RegexFixerProvider;
   const pathFixer = new PathFixerProvider;
@@ -54361,7 +54668,7 @@ var init_fixers = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.11+267785e00c831d29/node_modules/@gobing-ai/ts-ai-runner/dist/agents/shims.js
+// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.14+127e896e9a498407/node_modules/@gobing-ai/ts-ai-runner/dist/agents/shims.js
 function resolveAgentName(input) {
   if (isCanonicalName(input))
     return input;
@@ -54612,7 +54919,7 @@ var init_shims = __esm(() => {
   ALIAS_TO_CANONICAL = Object.fromEntries(Object.values(AGENT_SHIMS).flatMap((shim) => (shim.aliases ?? []).map((alias3) => [alias3, shim.name])));
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.11+267785e00c831d29/node_modules/@gobing-ai/ts-ai-runner/dist/identity.js
+// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.14+127e896e9a498407/node_modules/@gobing-ai/ts-ai-runner/dist/identity.js
 function buildIdentityPreamble(ctx) {
   const sections = [
     `You are agent \`${ctx.agentId}\` (${ctx.agentType}) in workspace \`${ctx.workspace}\`.`
@@ -54672,7 +54979,7 @@ var init_identity = __esm(() => {
   init_dist5();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.11+267785e00c831d29/node_modules/@gobing-ai/ts-ai-runner/dist/slash-command.js
+// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.14+127e896e9a498407/node_modules/@gobing-ai/ts-ai-runner/dist/slash-command.js
 function isClaudeStyleSlashCommand(input) {
   return SLASH_COMMAND_RE.test(input);
 }
@@ -54700,7 +55007,7 @@ var init_slash_command = __esm(() => {
   SLASH_COMMAND_RE = /^\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)(\s.*)?$/;
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.11+267785e00c831d29/node_modules/@gobing-ai/ts-ai-runner/dist/ai-runner.js
+// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.14+127e896e9a498407/node_modules/@gobing-ai/ts-ai-runner/dist/ai-runner.js
 class AiRunner {
   processExecutor;
   defaultCwd;
@@ -54753,7 +55060,12 @@ class AiRunner {
   async invoke(agent, operation, command, options, forceBuffered) {
     const label = `ai-runner.${agent}.${operation}`;
     this.logger.debug("invoke", { label, command: command.command, args: command.args.join(" ") });
-    this.events?.emit("agent.invoke.start", { agent, operation, label });
+    this.events?.emit("agent.invoke.start", {
+      agent,
+      operation,
+      label,
+      ...options.correlation !== undefined ? { correlation: options.correlation } : {}
+    });
     const result = await this.processExecutor.run({
       command: command.command,
       args: command.args,
@@ -54762,7 +55074,8 @@ class AiRunner {
       forceBuffered,
       cwd: options.cwd ?? this.defaultCwd,
       timeout: options.timeout ?? this.defaultTimeout,
-      ...options.signal !== undefined ? { signal: options.signal } : {}
+      ...options.signal !== undefined ? { signal: options.signal } : {},
+      ...options.onOutput !== undefined ? { onOutput: options.onOutput } : {}
     });
     if (result.exitCode !== 0) {
       this.logger.error("invoke exited non-zero", {
@@ -54777,7 +55090,8 @@ class AiRunner {
       label,
       exitCode: result.exitCode,
       ...result.signal !== undefined ? { signal: result.signal } : {},
-      durationMs: result.durationMs
+      durationMs: result.durationMs,
+      ...options.correlation !== undefined ? { correlation: options.correlation } : {}
     });
     return {
       exitCode: result.exitCode,
@@ -54818,7 +55132,7 @@ var init_ai_runner = __esm(() => {
   init_slash_command();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.11+267785e00c831d29/node_modules/@gobing-ai/ts-ai-runner/dist/agent-detector.js
+// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.14+127e896e9a498407/node_modules/@gobing-ai/ts-ai-runner/dist/agent-detector.js
 class AgentDetector {
   runner;
   timeout;
@@ -54894,7 +55208,7 @@ var init_agent_detector = __esm(() => {
   VERSION_PATTERN = /(?<version>\d+\.\d+(?:\.\d+)?)/;
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.11+267785e00c831d29/node_modules/@gobing-ai/ts-ai-runner/dist/agent-spec.js
+// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.14+127e896e9a498407/node_modules/@gobing-ai/ts-ai-runner/dist/agent-spec.js
 function validateAgentId(id) {
   if (!/^[a-z][a-z0-9_-]{1,63}$/.test(id)) {
     throw new ValueError(`Invalid agent id "${id}": expected 2-64 chars, lowercase alphanumeric, "_" or "-"`);
@@ -54991,7 +55305,7 @@ var init_agent_spec = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.11+267785e00c831d29/node_modules/@gobing-ai/ts-ai-runner/dist/agents/auth-shims.js
+// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.14+127e896e9a498407/node_modules/@gobing-ai/ts-ai-runner/dist/agents/auth-shims.js
 function isNonEmpty(value) {
   return value !== undefined && value.trim().length > 0;
 }
@@ -55096,7 +55410,7 @@ var init_auth_shims = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.11+267785e00c831d29/node_modules/@gobing-ai/ts-ai-runner/dist/model-health-probe.js
+// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.14+127e896e9a498407/node_modules/@gobing-ai/ts-ai-runner/dist/model-health-probe.js
 class ModelHealthProbeRegistry {
   probes = new Map;
   register(providerPrefix, probe) {
@@ -55204,7 +55518,7 @@ var init_model_health_probe = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.11+267785e00c831d29/node_modules/@gobing-ai/ts-ai-runner/dist/doctor-runner.js
+// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.14+127e896e9a498407/node_modules/@gobing-ai/ts-ai-runner/dist/doctor-runner.js
 class DoctorRunner {
   detector;
   runner;
@@ -55341,15 +55655,15 @@ var init_doctor_runner = __esm(() => {
   init_model_health_probe();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.11+267785e00c831d29/node_modules/@gobing-ai/ts-ai-runner/dist/events.js
+// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.14+127e896e9a498407/node_modules/@gobing-ai/ts-ai-runner/dist/events.js
 var init_events = () => {};
 
-// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.11+267785e00c831d29/node_modules/@gobing-ai/ts-ai-runner/dist/messages.js
+// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.14+127e896e9a498407/node_modules/@gobing-ai/ts-ai-runner/dist/messages.js
 function formatMessage(msg) {
   return `[task from=${msg.fromId ?? "operator"} id=${msg.id}] ${msg.body}`;
 }
 
-// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.11+267785e00c831d29/node_modules/@gobing-ai/ts-ai-runner/dist/team-agent-process.js
+// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.14+127e896e9a498407/node_modules/@gobing-ai/ts-ai-runner/dist/team-agent-process.js
 import { Buffer as Buffer5 } from "buffer";
 
 class TeamAgentProcess {
@@ -55483,7 +55797,7 @@ var init_team_agent_process = __esm(() => {
   init_dist5();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.11+267785e00c831d29/node_modules/@gobing-ai/ts-ai-runner/dist/team-orchestrator.js
+// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.14+127e896e9a498407/node_modules/@gobing-ai/ts-ai-runner/dist/team-orchestrator.js
 class TeamOrchestrator {
   configDir;
   inbox;
@@ -55612,7 +55926,7 @@ var init_team_orchestrator = __esm(() => {
   init_team_agent_process();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.11+267785e00c831d29/node_modules/@gobing-ai/ts-ai-runner/dist/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-ai-runner@0.4.14+127e896e9a498407/node_modules/@gobing-ai/ts-ai-runner/dist/index.js
 var exports_dist3 = {};
 __export(exports_dist3, {
   validateAgentId: () => validateAgentId,
@@ -55660,7 +55974,7 @@ var init_dist9 = __esm(() => {
   init_team_orchestrator();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/config-access.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/config-access.js
 function stringArray(value) {
   return Array.isArray(value) && value.every((item) => typeof item === "string") ? value : undefined;
 }
@@ -55698,7 +56012,7 @@ function parseInlineFlags(source) {
   return { flags, rest: source.slice(match[0].length) };
 }
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/glob-match.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/glob-match.js
 function matchesAny(path9, patterns) {
   if (patterns === undefined || patterns.length === 0)
     return true;
@@ -55746,7 +56060,7 @@ function escapeRegExp(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/file-discovery.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/file-discovery.js
 async function discoverFiles2(options) {
   const fs3 = options.fs ?? createNodeFileSystem3();
   const allFiles = await walkDir2(options.workdir, fs3, DEFAULT_EXCLUDES);
@@ -55774,12 +56088,12 @@ var init_file_discovery = __esm(() => {
   DEFAULT_EXCLUDES = new Set([".git", "node_modules", "dist", ".coverage", ".astro", ".wrangler"]);
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/file-utils.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/file-utils.js
 var init_file_utils = __esm(() => {
   init_file_discovery();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/agent-detection-evaluator.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/agent-detection-evaluator.js
 class AgentDetectionEvaluator {
   detector;
   constructor(detector = new AgentDetector) {
@@ -55807,7 +56121,7 @@ var init_agent_detection_evaluator = __esm(() => {
   init_file_utils();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/coverage-gate-evaluator.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/coverage-gate-evaluator.js
 class CoverageGateEvaluator {
   constructor() {}
   async evaluate(rule, context4) {
@@ -55891,7 +56205,7 @@ var init_coverage_gate_evaluator = __esm(() => {
   init_file_utils();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/exit-code-evaluator.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/exit-code-evaluator.js
 class ExitCodeEvaluator {
   executor;
   constructor(executor = nodeBunFactory3.createProcessExecutor()) {
@@ -55927,7 +56241,7 @@ var init_exit_code_evaluator = __esm(() => {
   init_file_utils();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/forbidden-import-evaluator.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/forbidden-import-evaluator.js
 class ForbiddenImportEvaluator {
   constructor() {}
   async evaluate(rule, context4) {
@@ -56008,7 +56322,7 @@ var init_forbidden_import_evaluator = __esm(() => {
   init_file_utils();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/import-boundary-evaluator.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/import-boundary-evaluator.js
 class ImportBoundaryEvaluator {
   async evaluate(rule, context4) {
     const config4 = rule.evaluator.config ?? {};
@@ -56101,7 +56415,7 @@ var init_import_boundary_evaluator = __esm(() => {
   init_file_utils();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/path-evaluator.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/path-evaluator.js
 class PathEvaluator {
   constructor() {}
   async evaluate(rule, context4) {
@@ -56162,7 +56476,7 @@ var init_path_evaluator = __esm(() => {
   init_file_utils();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/regex-evaluator.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/regex-evaluator.js
 class RegexEvaluator {
   constructor() {}
   async evaluate(rule, context4) {
@@ -56240,7 +56554,7 @@ var init_regex_evaluator = __esm(() => {
   init_file_utils();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/ripgrep-evaluator.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/ripgrep-evaluator.js
 class RipgrepEvaluator {
   executor;
   constructor(executor = nodeBunFactory3.createProcessExecutor()) {
@@ -56333,7 +56647,7 @@ var init_ripgrep_evaluator = __esm(() => {
   init_file_utils();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/schema-artifact-evaluator.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/schema-artifact-evaluator.js
 class SchemaArtifactEvaluator {
   constructor() {}
   async evaluate(rule, context4) {
@@ -56411,7 +56725,7 @@ var init_schema_artifact_evaluator = __esm(() => {
   init_file_utils();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/secrets-scanner-evaluator.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/secrets-scanner-evaluator.js
 class SecretsScannerEvaluator {
   constructor() {}
   async evaluate(rule, context4) {
@@ -56479,7 +56793,7 @@ var init_secrets_scanner_evaluator = __esm(() => {
   ALL_CATEGORIES = Object.keys(BUILTIN_PATTERNS);
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/sg-evaluator.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/sg-evaluator.js
 class SgEvaluator {
   executor;
   constructor(executor = nodeBunFactory3.createProcessExecutor()) {
@@ -56576,7 +56890,7 @@ var init_sg_evaluator = __esm(() => {
   init_file_utils();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/resolvers/test-path-resolver.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/resolvers/test-path-resolver.js
 class TypeScriptTestPathResolver {
   name = "typescript";
   constructor() {}
@@ -56659,7 +56973,7 @@ function testify(rel) {
   return `${dir}test_${base2}`;
 }
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/test-location-evaluator.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/test-location-evaluator.js
 class TestLocationEvaluator {
   resolvers;
   constructor(resolvers) {
@@ -56734,7 +57048,7 @@ var init_test_location_evaluator = __esm(() => {
   TYPESCRIPT_FALLBACK = new TypeScriptTestPathResolver;
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/tsdoc-export-evaluator.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/evaluators/tsdoc-export-evaluator.js
 class TsdocExportEvaluator {
   constructor() {}
   async evaluate(rule, context4) {
@@ -56819,7 +57133,7 @@ var init_tsdoc_export_evaluator = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/formatters/json.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/formatters/json.js
 class JsonFormatter {
   constructor() {}
   format(result) {
@@ -56827,7 +57141,7 @@ class JsonFormatter {
   }
 }
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/formatters/text.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/formatters/text.js
 class TextFormatter {
   constructor() {}
   format(result) {
@@ -56841,7 +57155,7 @@ class TextFormatter {
   }
 }
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/host/builtins.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/host/builtins.js
 function registerBuiltins(host, executor) {
   const path9 = new PathEvaluator;
   host.evaluators.register("regex", new RegexEvaluator, "builtin");
@@ -56881,7 +57195,7 @@ var init_builtins = __esm(() => {
   init_tsdoc_export_evaluator();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/host/rule-engine-host.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/host/rule-engine-host.js
 class RuleEngineHost {
   evaluators;
   formatters;
@@ -56898,7 +57212,7 @@ var init_rule_engine_host = __esm(() => {
   init_extension2();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/engine.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/engine.js
 class RuleEngine {
   host;
   events;
@@ -57069,7 +57383,7 @@ var init_engine = __esm(() => {
   init_types3();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/host/bundled-rules.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/host/bundled-rules.js
 async function bundledRulesRoot() {
   if (cachedRoot2 !== undefined)
     return cachedRoot2;
@@ -57120,7 +57434,7 @@ var init_bundled_rules = __esm(() => {
   init_dist5();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/persistence/db-adapter.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/persistence/db-adapter.js
 class DbRulePersistenceAdapter {
   db;
   constructor(db2) {
@@ -57154,7 +57468,7 @@ class DbRulePersistenceAdapter {
   }
 }
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/persistence/schema.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/persistence/schema.js
 var RULE_ENGINE_SCHEMA_SQL = `
 CREATE TABLE IF NOT EXISTS rule_runs (
     id TEXT PRIMARY KEY,
@@ -57200,10 +57514,10 @@ CREATE TABLE IF NOT EXISTS rule_eval_runs (
 CREATE INDEX IF NOT EXISTS idx_rule_eval_runs_run_id ON rule_eval_runs (run_id);
 `;
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/persistence/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/persistence/index.js
 var init_persistence2 = () => {};
 
-// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.11+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-rule-engine@0.4.14+eb8900f44f4776f9/node_modules/@gobing-ai/ts-rule-engine/dist/index.js
 var init_dist10 = __esm(() => {
   init_extensions();
   init_loader2();
@@ -57402,7 +57716,7 @@ ${SYSTEM_EVENTS_SCHEMA_SQL}
   ];
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/job-queue/db-job-queue.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/job-queue/db-job-queue.js
 function queueLogger() {
   if (!_queueLogger)
     _queueLogger = getLogger2("job-queue");
@@ -57630,7 +57944,7 @@ var init_db_job_queue = __esm(() => {
   init_tracing2();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/job-queue-db.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/job-queue-db.js
 var exports_job_queue_db = {};
 __export(exports_job_queue_db, {
   DBQueueConsumer: () => DBQueueConsumer,
@@ -57694,6 +58008,9 @@ function bumpStageSchemaMajor(version3) {
 function bumpStageSchemaMinor(version3) {
   return { major: version3.major, minor: version3.minor + 1 };
 }
+function normalizeCapabilityTier(value) {
+  return value === LEGACY_CAPABLE_ALIAS ? "capable-1" : value;
+}
 function isTierEligible(candidateTier, minTier) {
   return TIER_RANK[candidateTier] >= TIER_RANK[minTier];
 }
@@ -57765,7 +58082,7 @@ function parseStageRecord(raw, consumerVersion = STAGE_REGISTRY_SCHEMA_VERSION)
 function getCanonicalStage(idOrAlias) {
   return CANONICAL_STAGE_BY_KEY.get(idOrAlias);
 }
-var STAGE_REGISTRY_SCHEMA_VERSION, stageSchemaVersionSchema, AUTHORITY_LANES, MUTATION_CLASSES, EXECUTION_KINDS, inlineExecutionSchema, subprocessExecutionSchema, deterministicExecutionSchema, hitlExecutionSchema, irreversibleExecutionSchema, executionKindSchema, ARTIFACT_DIRECTIONS, stageArtifactSchema, stageGateSchema, stageRetryPolicySchema, stageModelPolicySchema, TIER_RANK, CONTEXT_LAYER_NAMES, stageContextLayerSchema, stageEventSchema, STAGE_ID_PATTERN, stageRecordSchema, StageRegistryError, REGISTERED_CANONICAL_STAGES, CANONICAL_STAGE_BY_KEY;
+var STAGE_REGISTRY_SCHEMA_VERSION, stageSchemaVersionSchema, AUTHORITY_LANES, MUTATION_CLASSES, EXECUTION_KINDS, inlineExecutionSchema, subprocessExecutionSchema, deterministicExecutionSchema, hitlExecutionSchema, irreversibleExecutionSchema, executionKindSchema, ARTIFACT_DIRECTIONS, stageArtifactSchema, stageGateSchema, stageRetryPolicySchema, CAPABILITY_TIERS, LEGACY_CAPABLE_ALIAS = "capable", capabilityTierSchema, stageModelPolicySchema, TIER_RANK, CONTEXT_LAYER_NAMES, stageContextLayerSchema, stageEventSchema, STAGE_ID_PATTERN, stageRecordSchema, StageRegistryError, REGISTERED_CANONICAL_STAGES, CANONICAL_STAGE_BY_KEY;
 var init_schema4 = __esm(() => {
   init_zod();
   STAGE_REGISTRY_SCHEMA_VERSION = {
@@ -57839,10 +58156,12 @@ var init_schema4 = __esm(() => {
     terminal_stop: exports_external.enum(["block", "escalate", "fail"]),
     timeout_seconds: exports_external.number().int().positive().optional()
   }).strict();
+  CAPABILITY_TIERS = ["cheap", "standard", "capable-1", "capable-2", "capable-3"];
+  capabilityTierSchema = exports_external.preprocess(normalizeCapabilityTier, exports_external.enum(CAPABILITY_TIERS));
   stageModelPolicySchema = exports_external.object({
-    min_tier: exports_external.enum(["cheap", "standard", "capable"]),
+    min_tier: capabilityTierSchema,
     fallback: exports_external.array(exports_external.object({
-      tier: exports_external.enum(["cheap", "standard", "capable"]),
+      tier: capabilityTierSchema,
       trigger: exports_external.enum(["gate-fail", "timeout", "insufficient-evidence", "retry-exhausted"])
     }).strict()),
     override_key: exports_external.string().optional()
@@ -57850,7 +58169,9 @@ var init_schema4 = __esm(() => {
   TIER_RANK = {
     cheap: 1,
     standard: 2,
-    capable: 3
+    "capable-1": 3,
+    "capable-2": 4,
+    "capable-3": 5
   };
   CONTEXT_LAYER_NAMES = [
     "harness-policy",
@@ -57912,7 +58233,7 @@ var init_schema4 = __esm(() => {
       retry: { max_attempts: 3, terminal_stop: "block" },
       model_policy: {
         min_tier: "standard",
-        fallback: [{ tier: "capable", trigger: "gate-fail" }]
+        fallback: [{ tier: "capable-2", trigger: "gate-fail" }]
       },
       context_layers: [],
       observability: [],
@@ -57930,8 +58251,8 @@ var init_schema4 = __esm(() => {
       mutation_class: "corpus",
       retry: { max_attempts: 3, terminal_stop: "block" },
       model_policy: {
-        min_tier: "capable",
-        fallback: []
+        min_tier: "capable-2",
+        fallback: [{ tier: "capable-3", trigger: "gate-fail" }]
       },
       context_layers: [],
       observability: [],
@@ -57951,8 +58272,8 @@ var init_schema4 = __esm(() => {
       model_policy: {
         min_tier: "standard",
         fallback: [
-          { tier: "capable", trigger: "gate-fail" },
-          { tier: "capable", trigger: "timeout" }
+          { tier: "capable-1", trigger: "gate-fail" },
+          { tier: "capable-1", trigger: "timeout" }
         ]
       },
       context_layers: [],
@@ -57972,7 +58293,7 @@ var init_schema4 = __esm(() => {
       retry: { max_attempts: 3, terminal_stop: "block" },
       model_policy: {
         min_tier: "standard",
-        fallback: [{ tier: "capable", trigger: "gate-fail" }]
+        fallback: [{ tier: "capable-1", trigger: "gate-fail" }]
       },
       context_layers: [],
       observability: [],
@@ -57990,7 +58311,7 @@ var init_schema4 = __esm(() => {
       mutation_class: "verdict",
       retry: { max_attempts: 2, terminal_stop: "escalate" },
       model_policy: {
-        min_tier: "capable",
+        min_tier: "capable-1",
         fallback: []
       },
       context_layers: [],
@@ -58010,7 +58331,7 @@ var init_schema4 = __esm(() => {
       retry: { max_attempts: 2, terminal_stop: "block" },
       model_policy: {
         min_tier: "standard",
-        fallback: [{ tier: "capable", trigger: "gate-fail" }]
+        fallback: [{ tier: "capable-1", trigger: "gate-fail" }]
       },
       context_layers: [],
       observability: [],
@@ -58029,7 +58350,7 @@ var init_schema4 = __esm(() => {
       retry: { max_attempts: 2, terminal_stop: "block" },
       model_policy: {
         min_tier: "standard",
-        fallback: [{ tier: "capable", trigger: "gate-fail" }]
+        fallback: [{ tier: "capable-1", trigger: "gate-fail" }]
       },
       context_layers: [],
       observability: [],
@@ -58047,7 +58368,7 @@ var init_schema4 = __esm(() => {
       mutation_class: "driver",
       retry: { max_attempts: 3, terminal_stop: "block" },
       model_policy: {
-        min_tier: "capable",
+        min_tier: "capable-1",
         fallback: []
       },
       context_layers: [],
@@ -59303,6 +59624,9 @@ var init_schema6 = __esm(() => {
     name: exports_external.string().min(1, "name is required"),
     background: exports_external.string().optional(),
     requirements: exports_external.string().optional(),
+    design: exports_external.string().optional(),
+    plan: exports_external.string().optional(),
+    acceptance_criteria: exports_external.string().optional(),
     feature_id: featureId,
     parent_wbs: wbsString,
     priority: exports_external.enum(PRIORITIES).optional(),
@@ -59680,6 +60004,7 @@ __export(exports_src, {
   normalizeTaskStatusSafe: () => normalizeTaskStatusSafe,
   normalizeTaskStatus: () => normalizeTaskStatus,
   normalizeFeatureStatus: () => normalizeFeatureStatus,
+  normalizeCapabilityTier: () => normalizeCapabilityTier,
   mergeStubs: () => mergeStubs,
   matrixEntrySchema: () => matrixEntrySchema,
   matchEtlPayloads: () => matchEtlPayloads,
@@ -59732,6 +60057,7 @@ __export(exports_src, {
   cleanupTempFiles: () => cleanupTempFiles,
   checkLayerStale: () => checkLayerStale,
   checkAcCoverage: () => checkAcCoverage,
+  capabilityTierSchema: () => capabilityTierSchema,
   canonicalJson: () => canonicalJson,
   cacheHitRatio: () => cacheHitRatio,
   bumpStageSchemaMinor: () => bumpStageSchemaMinor,
@@ -59785,6 +60111,7 @@ __export(exports_src, {
   MarkdownDocument: () => MarkdownDocument,
   MUTATION_CLASSES: () => MUTATION_CLASSES,
   MODEL_PRICING: () => MODEL_PRICING,
+  LEGACY_CAPABLE_ALIAS: () => LEGACY_CAPABLE_ALIAS,
   InlineContext: () => InlineContext,
   InboxRecentDao: () => InboxRecentDao,
   InboxMessageDao: () => InboxMessageDao,
@@ -59802,6 +60129,7 @@ __export(exports_src, {
   CLI_SCHEMA_SQL: () => CLI_SCHEMA_SQL,
   CLI_MIGRATION_FILE_MARKER: () => CLI_MIGRATION_FILE_MARKER,
   CLI_MIGRATIONS: () => CLI_MIGRATIONS,
+  CAPABILITY_TIERS: () => CAPABILITY_TIERS,
   CACHEABILITY_CLASSES: () => CACHEABILITY_CLASSES,
   ArtifactDao: () => ArtifactDao,
   ActionRunDao: () => ActionRunDao,
@@ -59887,7 +60215,10 @@ class AgentService {
     return results.some((result) => !result.usable && result.tier === 1) ? 1 : 0;
   }
   async run(prompt, flags, deps) {
-    const outcome = await this.executeRun(prompt, flags, deps, { silent: false });
+    const outcome = await this.executeRun(prompt, flags, deps, {
+      silent: false,
+      execution: this.defaultExecutionOptions(flags)
+    });
     if (!outcome.ok) {
       this.ctx.output.error(outcome.message);
       return outcome.exitCode;
@@ -59919,8 +60250,12 @@ class AgentService {
       stderr: result.stderr
     };
   }
-  async runTraced(prompt, flags, deps) {
-    const outcome = await this.executeRun(prompt, flags, deps, { silent: true, nonInteractive: true });
+  async runTraced(prompt, flags, deps, execution) {
+    const outcome = await this.executeRun(prompt, flags, deps, {
+      silent: true,
+      nonInteractive: true,
+      execution: execution ?? this.defaultExecutionOptions(flags)
+    });
     if (!outcome.ok) {
       return { exitCode: outcome.exitCode, stdout: "", message: outcome.message };
     }
@@ -60029,22 +60364,59 @@ class AgentService {
     let result;
     const controller = new AbortController;
     const onTerminate = () => controller.abort();
+    const onExternalAbort = () => controller.abort();
+    const lifecycle = new AgentExecutionLifecycle(options.execution?.observer, options.execution?.correlation, configuredSecretValues(this.ctx.env), options.execution?.heartbeatMs);
+    lifecycle.start({
+      agent,
+      ...model !== undefined ? { model } : {},
+      invocation: `${invocation.command} ${invocation.argv.join(" ")}`,
+      ...timeoutMs !== undefined ? { timeoutMs } : {}
+    });
+    const dispatchStartedAt = Date.now();
     try {
       process.on("SIGTERM", onTerminate);
       process.on("SIGINT", onTerminate);
+      options.execution?.signal?.addEventListener("abort", onExternalAbort, { once: true });
+      if (options.execution?.signal?.aborted === true)
+        controller.abort();
       result = await runner.runPromptCommand(agent, promptOptions, {
         cwd: cwd || undefined,
         ...timeoutMs !== undefined ? { timeout: timeoutMs } : {},
-        signal: controller.signal
+        signal: controller.signal,
+        correlation: lifecycle.identity,
+        onOutput: (output2) => lifecycle.observe(output2)
       });
     } catch (error51) {
+      lifecycle.finish({
+        exitCode: null,
+        durationMs: Date.now() - dispatchStartedAt,
+        ...controller.signal.aborted ? { reason: "cancelled" } : {},
+        ...!controller.signal.aborted ? { reason: error51 instanceof Error ? error51.message : String(error51) } : {}
+      });
       return { ok: false, exitCode: 2, message: error51 instanceof Error ? error51.message : String(error51) };
     } finally {
       process.off("SIGTERM", onTerminate);
       process.off("SIGINT", onTerminate);
+      options.execution?.signal?.removeEventListener("abort", onExternalAbort);
     }
+    lifecycle.finish({
+      exitCode: result.exitCode,
+      durationMs: result.durationMs,
+      ...result.signal !== undefined ? { signal: result.signal } : {},
+      ...controller.signal.aborted && result.signal === undefined ? { reason: "cancelled" } : {}
+    });
     return { ok: true, result, invocation };
   }
+  defaultExecutionOptions(flags) {
+    const runId = stringFlag(flags, "run-id", "") || crypto.randomUUID();
+    const observer = this.ctx.events === undefined ? undefined : (event) => {
+      this.ctx.events?.emit("agent.execution", event);
+    };
+    return {
+      correlation: { runId, executionId: crypto.randomUUID() },
+      ...observer !== undefined ? { observer } : {}
+    };
+  }
   hasWarnedDeprecation = false;
   warnDeprecationOnce(message) {
     if (!this.hasWarnedDeprecation) {
@@ -60350,13 +60722,15 @@ function parseTagsFlag(flags) {
   return tags.length > 0 ? tags : undefined;
 }
 function getExecutorTier(executor) {
-  if (executor.tier)
-    return executor.tier;
+  if (executor.tier) {
+    const declared = executor.tier;
+    return declared === "capable" ? "capable-1" : declared;
+  }
   const combined = `${executor.name} ${executor.model ?? ""} ${executor.agent}`.toLowerCase();
   if (/\b(cheap|haiku|flash|lite|mini|fast)\b/.test(combined))
     return "cheap";
   if (/\b(capable|opus|pro|sonnet|r1|o1|o3|expert)\b/.test(combined))
-    return "capable";
+    return "capable-1";
   return "standard";
 }
 var TRACE_SAFE_SLASH_COMMAND, TRACE_SAFE_SLASH_TOKEN, SENSITIVE_FLAG, SENSITIVE_INLINE_FLAG;
@@ -60364,6 +60738,7 @@ var init_agent_service = __esm(() => {
   init_src2();
   init_dist9();
   init_dist5();
+  init_agent_execution();
   TRACE_SAFE_SLASH_COMMAND = /^(?:\/skill:(?:sp|rd3)-|\/(?:sp|rd3)[:-]|\$(?:sp|rd3)-)[A-Za-z0-9._-]+(?:\s|$)/;
   TRACE_SAFE_SLASH_TOKEN = /^(?:\d{4}|--(?:auto|next|force|bdd)|--(?:mode|fix|focus)|implement|test|review|verify|all|none|blockers-first|quick|requirements|background|constraints|acceptance)$/;
   SENSITIVE_FLAG = /^--?(?:api[-_]?key|authorization|credential|password|secret|token)$/i;
@@ -60898,12 +61273,23 @@ function evaluateDoneTransition(input) {
   if (targetStatus === currentStatus) {
     return { kind: "noop", fromStatus: currentStatus, message: formatNoopMessage(wbs, currentStatus) };
   }
-  if (artifact === undefined) {
-    return { kind: "allow", reason: "no-artifact" };
-  }
   if (forced) {
     return { kind: "allow", reason: "forced" };
   }
+  if (artifact === undefined) {
+    const verdictPath2 = `.spur/run/${wbs}-verdict.json`;
+    return {
+      kind: "deny",
+      verdict: "UNKNOWN",
+      message: [
+        `Cannot transition task ${wbs} to done: missing verify verdict artifact.`,
+        `  task:    ${taskFilePath}`,
+        `  verdict: ${verdictPath2} (not found)`,
+        `  remediation: re-run \`/sp:dev-verify ${wbs}\` until PASS (writes the artifact), ` + `or override with \`spur task update ${wbs} done --force-done --reason "<why>"\`.`
+      ].join(`
+`)
+    };
+  }
   const computed = computeAggregate(artifact);
   const effective = harshnessMax(artifact.verdict, computed);
   if (effective === "PASS") {
@@ -61172,10 +61558,22 @@ var init_planning_check_base = __esm(() => {
 // ../../packages/app/src/services/feature-check.ts
 var exports_feature_check = {};
 __export(exports_feature_check, {
+  defaultVerdictRunDir: () => defaultVerdictRunDir,
   FeatureCheckService: () => FeatureCheckService,
   DEFAULT_FEATURE_MATRIX: () => DEFAULT_FEATURE_MATRIX
 });
 import { dirname as dirname8, join as join7 } from "path";
+function defaultVerdictRunDir(tasksDir) {
+  const norm = tasksDir.replace(/\\/g, "/");
+  if (/\/docs\/tasks\d*$/.test(norm) || /\/docs\/tasks$/.test(norm)) {
+    return join7(dirname8(dirname8(tasksDir)), ".spur", "run");
+  }
+  return join7(dirname8(tasksDir), ".spur", "run");
+}
+function rowMatchesScenario(id, sc) {
+  const stripped = id.replace(/^Scenario:\s*/i, "").trim();
+  return normalizeTitle(id) === sc.normalized || normalizeTitle(stripped) === sc.normalized || id === sc.alias || stripped === sc.alias;
+}
 var DEFAULT_FEATURE_MATRIX, FeatureCheckService;
 var init_feature_check = __esm(() => {
   init_src2();
@@ -61241,7 +61639,7 @@ var init_feature_check = __esm(() => {
         await this.checkChildrenLimit(featureId2, options.featuresDir, findings);
       }
       const dogfoodDir = options?.dogfoodDir ?? (options?.featuresDir ? join7(dirname8(options.featuresDir), "dogfood") : undefined);
-      const runDir = options?.runDir ?? (options?.tasksDir ? join7(dirname8(options.tasksDir), ".spur", "run") : undefined);
+      const runDir = options?.runDir ?? (options?.tasksDir ? defaultVerdictRunDir(options.tasksDir) : undefined);
       await this.runL4(doc2, featureId2, status, options?.tasksDir, dogfoodDir, runDir, findings);
       return { id: featureId2, ...this.summarizeWithStatus(status, findings, strict, options?.severityOverrides) };
     }
@@ -61533,7 +61931,8 @@ var init_feature_check = __esm(() => {
           continue;
         if (artifact.verdict !== "PASS")
           continue;
-        const matched = artifact.requirements.find((r) => normalizeTitle(r.id) === sc.normalized || normalizeTitle(r.alias ?? r.id) === sc.normalized || r.id === sc.alias);
+        const rows = [...artifact.requirements, ...artifact.acceptanceCriteria];
+        const matched = rows.find((r) => rowMatchesScenario(r.id, sc));
         if (matched !== undefined && matched.status === "MET")
           return true;
       }
@@ -61545,10 +61944,12 @@ var init_feature_check = __esm(() => {
         const parsed = JSON.parse(raw);
         if (typeof parsed.verdict !== "string")
           return null;
-        if (!Array.isArray(parsed.requirements))
+        const pickRows = (arr) => (arr ?? []).filter((r) => typeof r?.id === "string" && typeof r?.status === "string").map((r) => ({ id: r.id, status: r.status }));
+        const requirements = pickRows(parsed.requirements);
+        const acceptanceCriteria = pickRows(parsed.acceptanceCriteria);
+        if (requirements.length === 0 && acceptanceCriteria.length === 0)
           return null;
-        const requirements = parsed.requirements.filter((r) => typeof r?.id === "string" && typeof r?.status === "string").map((r) => ({ id: r.id, status: r.status }));
-        return { verdict: parsed.verdict, requirements };
+        return { verdict: parsed.verdict, requirements, acceptanceCriteria };
       } catch {
         return null;
       }
@@ -61556,6 +61957,75 @@ var init_feature_check = __esm(() => {
   };
 });
 
+// ../../packages/app/src/services/task-locator.ts
+import { resolve as resolvePath5 } from "path";
+async function readDirIfPresent(fs3, dir) {
+  try {
+    return await fs3.readDir(dir);
+  } catch (error51) {
+    const code = error51.code;
+    if (code === "ENOENT" || code === "ENOTDIR")
+      return [];
+    throw error51;
+  }
+}
+
+class TaskLocator {
+  fs;
+  dirs;
+  constructor(source) {
+    this.fs = source.fs;
+    if ("dirs" in source) {
+      this.dirs = [...new Set(source.dirs)];
+      return;
+    }
+    const folderKeys = source.foldersConfig ? Object.keys(source.foldersConfig.folders) : [];
+    this.dirs = [...new Set([source.tasksDir, ...folderKeys.map((key) => source.fs.resolve(key))])];
+  }
+  static forSingleDir(fs3, dir) {
+    return new TaskLocator({ fs: fs3, tasksDir: dir });
+  }
+  static forDirs(fs3, dirs) {
+    return new TaskLocator({ fs: fs3, dirs });
+  }
+  folderDirs() {
+    return this.dirs;
+  }
+  async findByWbs(wbs) {
+    const prefix = `${wbs}_`;
+    for (const dir of this.folderDirs()) {
+      for (const name of await readDirIfPresent(this.fs, dir)) {
+        if (name.startsWith(prefix) && name.endsWith(".md")) {
+          return { wbs, name, filePath: `${dir}/${name}` };
+        }
+      }
+    }
+    return null;
+  }
+  async findPathByWbs(wbs) {
+    return (await this.findByWbs(wbs))?.filePath ?? null;
+  }
+  async exactMatch(target) {
+    const normalized = resolvePath5(target);
+    for (const dir of this.folderDirs()) {
+      for (const name of await readDirIfPresent(this.fs, dir)) {
+        const captured = TASK_FILENAME_RE.exec(name);
+        if (captured === null)
+          continue;
+        const filePath = `${dir}/${name}`;
+        if (resolvePath5(filePath) === normalized) {
+          return { wbs: captured[1], name, filePath };
+        }
+      }
+    }
+    return null;
+  }
+}
+var TASK_FILENAME_RE;
+var init_task_locator = __esm(() => {
+  TASK_FILENAME_RE = /^(\d{4})_(.+)\.md$/;
+});
+
 // ../../packages/app/src/services/feature-service.ts
 function stripLeadingSectionHeader(body, sectionName) {
   const match = body.match(/^(\s*)#{1,6}\s+(.+?)\s*(?:\n|$)/);
@@ -61746,7 +62216,8 @@ class FeatureService {
       const checkSvc = new FeatureCheckService(this.ctx.fs);
       const res = await checkSvc.check(feature.filePath, featureId2, {
         featuresDir: this.ctx.featuresDir,
-        tasksDir: this.ctx.tasksDir
+        tasksDir: this.ctx.tasksDir,
+        runDir: defaultVerdictRunDir(this.ctx.tasksDir)
       });
       const l4Errors = res.findings.filter((f) => f.layer === "L4" && f.severity === "error");
       return { pass: l4Errors.length === 0, findings: res.findings };
@@ -61870,36 +62341,45 @@ class FeatureService {
       results
     };
   }
+  taskLocator() {
+    return new TaskLocator({
+      fs: this.ctx.fs,
+      tasksDir: this.ctx.tasksDir,
+      foldersConfig: this.ctx.foldersConfig
+    });
+  }
   async collectTasksByFeature() {
     const byFeature = new Map;
-    let names;
-    try {
-      names = await this.ctx.fs.readDir(this.ctx.tasksDir);
-    } catch {
-      return byFeature;
-    }
-    for (const name of names) {
-      if (!/^\d{4}_.+\.md$/.test(name))
-        continue;
-      const wbs = name.match(/^(\d{4})_/)?.[1];
-      if (!wbs)
-        continue;
+    for (const dir of this.taskLocator().folderDirs()) {
+      let names;
       try {
-        const raw = await this.ctx.fs.readFile(`${this.ctx.tasksDir}/${name}`);
-        const doc2 = MarkdownDocument.parse(raw, "task");
-        const fm = doc2.frontmatterData ?? {};
-        const fid = fm.feature_id ?? fm["feature-id"];
-        if (fid === undefined)
+        names = await this.ctx.fs.readDir(dir);
+      } catch {
+        continue;
+      }
+      for (const name of names) {
+        if (!/^\d{4}_.+\.md$/.test(name))
           continue;
-        const row = {
-          wbs,
-          name: fm.name ?? wbs,
-          status: fm.status ?? "backlog"
-        };
-        const list = byFeature.get(fid) ?? [];
-        list.push(row);
-        byFeature.set(fid, list);
-      } catch {}
+        const wbs = name.match(/^(\d{4})_/)?.[1];
+        if (!wbs)
+          continue;
+        try {
+          const raw = await this.ctx.fs.readFile(`${dir}/${name}`);
+          const doc2 = MarkdownDocument.parse(raw, "task");
+          const fm = doc2.frontmatterData ?? {};
+          const fid = fm.feature_id ?? fm["feature-id"];
+          if (fid === undefined)
+            continue;
+          const row = {
+            wbs,
+            name: fm.name ?? wbs,
+            status: fm.status ?? "backlog"
+          };
+          const list = byFeature.get(fid) ?? [];
+          list.push(row);
+          byFeature.set(fid, list);
+        } catch {}
+      }
     }
     for (const list of byFeature.values()) {
       list.sort((a2, b) => a2.wbs.localeCompare(b.wbs));
@@ -61997,26 +62477,29 @@ class FeatureService {
   }
   async tasksWithFeatureIds(ids) {
     const out = [];
-    let names;
-    try {
-      names = await this.ctx.fs.readDir(this.ctx.tasksDir);
-    } catch {
-      return out;
-    }
-    for (const name of names) {
-      if (!/^\d{4}_.+\.md$/.test(name))
-        continue;
-      const wbs = name.match(/^(\d{4})_/)?.[1];
-      if (!wbs)
-        continue;
+    for (const dir of this.taskLocator().folderDirs()) {
+      let names;
       try {
-        const raw = await this.ctx.fs.readFile(`${this.ctx.tasksDir}/${name}`);
-        const fm = MarkdownDocument.parse(raw, "task").frontmatterData ?? {};
-        const fid = fm.feature_id ?? fm["feature-id"];
-        if (fid !== undefined && ids.has(fid)) {
-          out.push({ wbs, path: `${this.ctx.tasksDir}/${name}`, featureId: fid });
-        }
-      } catch {}
+        names = await this.ctx.fs.readDir(dir);
+      } catch {
+        continue;
+      }
+      for (const name of names) {
+        if (!/^\d{4}_.+\.md$/.test(name))
+          continue;
+        const wbs = name.match(/^(\d{4})_/)?.[1];
+        if (!wbs)
+          continue;
+        try {
+          const path9 = `${dir}/${name}`;
+          const raw = await this.ctx.fs.readFile(path9);
+          const fm = MarkdownDocument.parse(raw, "task").frontmatterData ?? {};
+          const fid = fm.feature_id ?? fm["feature-id"];
+          if (fid !== undefined && ids.has(fid)) {
+            out.push({ wbs, path: path9, featureId: fid });
+          }
+        } catch {}
+      }
     }
     out.sort((a2, b) => a2.wbs.localeCompare(b.wbs));
     return out;
@@ -62192,6 +62675,7 @@ var FEATURE_FILE_RE;
 var init_feature_service = __esm(() => {
   init_src2();
   init_feature_check();
+  init_task_locator();
   FEATURE_FILE_RE = /^([A-Z][1-9]*)_(.+)\.md$/;
 });
 
@@ -63636,75 +64120,6 @@ var init_system_event_emitter = __esm(() => {
   init_system_event_tap();
 });
 
-// ../../packages/app/src/services/task-locator.ts
-import { resolve as resolvePath5 } from "path";
-async function readDirIfPresent(fs3, dir) {
-  try {
-    return await fs3.readDir(dir);
-  } catch (error51) {
-    const code = error51.code;
-    if (code === "ENOENT" || code === "ENOTDIR")
-      return [];
-    throw error51;
-  }
-}
-
-class TaskLocator {
-  fs;
-  dirs;
-  constructor(source) {
-    this.fs = source.fs;
-    if ("dirs" in source) {
-      this.dirs = [...new Set(source.dirs)];
-      return;
-    }
-    const folderKeys = source.foldersConfig ? Object.keys(source.foldersConfig.folders) : [];
-    this.dirs = [...new Set([source.tasksDir, ...folderKeys.map((key) => source.fs.resolve(key))])];
-  }
-  static forSingleDir(fs3, dir) {
-    return new TaskLocator({ fs: fs3, tasksDir: dir });
-  }
-  static forDirs(fs3, dirs) {
-    return new TaskLocator({ fs: fs3, dirs });
-  }
-  folderDirs() {
-    return this.dirs;
-  }
-  async findByWbs(wbs) {
-    const prefix = `${wbs}_`;
-    for (const dir of this.folderDirs()) {
-      for (const name of await readDirIfPresent(this.fs, dir)) {
-        if (name.startsWith(prefix) && name.endsWith(".md")) {
-          return { wbs, name, filePath: `${dir}/${name}` };
-        }
-      }
-    }
-    return null;
-  }
-  async findPathByWbs(wbs) {
-    return (await this.findByWbs(wbs))?.filePath ?? null;
-  }
-  async exactMatch(target) {
-    const normalized = resolvePath5(target);
-    for (const dir of this.folderDirs()) {
-      for (const name of await readDirIfPresent(this.fs, dir)) {
-        const captured = TASK_FILENAME_RE.exec(name);
-        if (captured === null)
-          continue;
-        const filePath = `${dir}/${name}`;
-        if (resolvePath5(filePath) === normalized) {
-          return { wbs: captured[1], name, filePath };
-        }
-      }
-    }
-    return null;
-  }
-}
-var TASK_FILENAME_RE;
-var init_task_locator = __esm(() => {
-  TASK_FILENAME_RE = /^(\d{4})_(.+)\.md$/;
-});
-
 // ../../packages/app/src/services/task-check.ts
 import { dirname as dirname9, join as join9 } from "path";
 function isPlaceholderBody(body) {
@@ -63764,6 +64179,36 @@ function isProseOnlyReview(body) {
   return !stripped.split(`
 `).some((l) => l.includes("|"));
 }
+function resolveProjectRootFromTasksDir(tasksDir) {
+  const norm = tasksDir.replace(/\\/g, "/");
+  if (/\/docs\/tasks\d*$/.test(norm) || /\/docs\/tasks$/.test(norm)) {
+    return dirname9(dirname9(tasksDir));
+  }
+  return dirname9(tasksDir);
+}
+function extractBacktickLineAnchors(body) {
+  const out = [];
+  const re = /`([^`\n]+?:(\d+)(?:-(\d+))?)`/g;
+  let m = re.exec(body);
+  while (m !== null) {
+    const raw = m[1] ?? "";
+    const startStr = m[2];
+    const endStr = m[3];
+    if (startStr) {
+      const pathPart = raw.replace(/:(\d+)(?:-(\d+))?$/, "");
+      const hasExt = /\.\w{1,8}$/.test(pathPart.split("/").pop() ?? "");
+      if (pathPart && !pathPart.includes("://") && hasExt) {
+        const startLine = Number(startStr);
+        const endLine = endStr !== undefined ? Number(endStr) : undefined;
+        if (Number.isFinite(startLine) && startLine >= 1) {
+          out.push({ raw, path: pathPart, startLine, endLine });
+        }
+      }
+    }
+    m = re.exec(body);
+  }
+  return out;
+}
 function hasAdjacentFileLineColumns(body) {
   const lines = body.split(`
 `);
@@ -63959,6 +64404,7 @@ var init_task_check = __esm(() => {
           });
         }
       }
+      await this.checkLineAnchors(doc2, tasksDir, findings);
       const featureId2 = fm.feature_id ?? fm["feature-id"];
       const parentWbs = fm.parent_wbs ?? fm["parent-wbs"];
       const deps = fm.dependencies;
@@ -64194,6 +64640,54 @@ var init_task_check = __esm(() => {
         return null;
       }
     }
+    async checkLineAnchors(doc2, tasksDir, findings) {
+      const projectRoot = resolveProjectRootFromTasksDir(tasksDir);
+      for (const section of ["Testing", "Solution"]) {
+        const body = doc2.getSection(section);
+        if (body === null || isPlaceholderBody(body))
+          continue;
+        const citations = extractBacktickLineAnchors(body);
+        let reported = 0;
+        for (const cite of citations) {
+          if (reported >= 5)
+            break;
+          const abs = join9(projectRoot, cite.path);
+          let exists2 = false;
+          try {
+            exists2 = await this.fs.exists(abs);
+          } catch {
+            exists2 = false;
+          }
+          if (!exists2) {
+            findings.push({
+              layer: "L4",
+              code: FINDING_CODES.L4_STALE_LINE_ANCHOR,
+              severity: "warning",
+              section,
+              message: `Stale line anchor \`${cite.raw}\` \u2014 file not found at ${cite.path} (from project root)`
+            });
+            reported++;
+            continue;
+          }
+          try {
+            const raw = await this.fs.readFile(abs);
+            const lineCount = raw.split(`
+`).length;
+            const end = cite.endLine ?? cite.startLine;
+            if (cite.startLine < 1 || end > lineCount) {
+              findings.push({
+                layer: "L4",
+                code: FINDING_CODES.L4_STALE_LINE_ANCHOR,
+                severity: "warning",
+                section,
+                message: `Stale line anchor \`${cite.raw}\` \u2014 line ${cite.startLine}${cite.endLine ? `-${cite.endLine}` : ""} outside file (${lineCount} lines)`
+              });
+              reported++;
+            }
+          } catch {}
+        }
+      }
+    }
     async findChildren(tasksDir, wbs) {
       const kids = [];
       for (const dir of this.locatorFor(tasksDir).folderDirs()) {
@@ -64597,9 +65091,24 @@ function renderCreatedTaskContent(params) {
   if (params.tags !== undefined && params.tags.length > 0) {
     content = patchFrontmatterField(content, "tags", `[${params.tags.map((tag) => JSON.stringify(tag)).join(", ")}]`);
   }
+  const sectionPatches = {};
   if ((params.requirements ?? "").trim() !== "") {
+    sectionPatches.Requirements = bulletizeRequirements(params.requirements ?? "");
+  }
+  if ((params.design ?? "").trim() !== "") {
+    sectionPatches.Design = (params.design ?? "").trim();
+  }
+  if ((params.plan ?? "").trim() !== "") {
+    sectionPatches.Plan = (params.plan ?? "").trim();
+  }
+  if ((params.acceptanceCriteria ?? "").trim() !== "") {
+    sectionPatches["Acceptance Criteria"] = (params.acceptanceCriteria ?? "").trim();
+  }
+  if (Object.keys(sectionPatches).length > 0) {
     const doc2 = MarkdownDocument.parse(content, "task");
-    doc2.replaceSection("Requirements", bulletizeRequirements(params.requirements ?? ""));
+    for (const [section, body] of Object.entries(sectionPatches)) {
+      doc2.replaceSection(section, body);
+    }
     content = doc2.serialize();
   }
   return content;
@@ -65116,7 +65625,7 @@ ${issues}`);
     if (!background && item.feature_id !== undefined && item.feature_id !== null) {
       background = await this.deriveBackground(item.feature_id);
     }
-    const hasSpec = background !== "" || (item.requirements ?? "").trim() !== "";
+    const hasSpec = background !== "" || (item.requirements ?? "").trim() !== "" || (item.design ?? "").trim() !== "" || (item.plan ?? "").trim() !== "" || (item.acceptance_criteria ?? "").trim() !== "";
     const status = hasSpec ? "todo" : "backlog";
     const variant = item.template ?? (item.feature_id !== undefined && item.feature_id !== null ? "feature-impl" : DEFAULT_TASK_VARIANT);
     return this.writeService.createAllocated(folder, async () => {
@@ -65138,7 +65647,10 @@ ${issues}`);
           parentWbs: item.parent_wbs ?? undefined,
           priority: item.priority,
           tags: item.tags,
-          requirements: item.requirements
+          requirements: item.requirements,
+          design: item.design,
+          plan: item.plan,
+          acceptanceCriteria: item.acceptance_criteria
         });
         const ref2 = { kind: "task", id: wbs, filePath, folder };
         return { ref: ref2, content: content2 };
@@ -65162,6 +65674,15 @@ ${issues}`);
       if ((item.requirements ?? "").trim() !== "") {
         taskBodies.Requirements = bulletizeRequirements(item.requirements ?? "");
       }
+      if ((item.design ?? "").trim() !== "") {
+        taskBodies.Design = (item.design ?? "").trim();
+      }
+      if ((item.plan ?? "").trim() !== "") {
+        taskBodies.Plan = (item.plan ?? "").trim();
+      }
+      if ((item.acceptance_criteria ?? "").trim() !== "") {
+        taskBodies["Acceptance Criteria"] = (item.acceptance_criteria ?? "").trim();
+      }
       const content = buildTaskSkeleton({
         wbs,
         title: item.name,
@@ -66274,6 +66795,247 @@ var init_token_ledger_watcher = __esm(() => {
   init_token_ledger_service();
 });
 
+// ../../packages/app/src/workflow/steering.ts
+class WorkflowSteeringController {
+  onAck;
+  secrets;
+  allowedActors;
+  onState;
+  active;
+  seen = new Set;
+  constructor(onAck, secrets = [], allowedActors = new Set(["operator"]), onState) {
+    this.onAck = onAck;
+    this.secrets = secrets;
+    this.allowedActors = allowedActors;
+    this.onState = onState;
+  }
+  get snapshot() {
+    const active = this.active;
+    return active === undefined ? undefined : {
+      runId: active.runId,
+      actionId: active.actionId,
+      state: active.state,
+      version: active.version
+    };
+  }
+  begin(runId, actionId, policy) {
+    this.active = {
+      runId,
+      actionId,
+      state: "running",
+      version: 1,
+      attempts: 1,
+      lastOk: false,
+      policy,
+      controller: new AbortController
+    };
+    this.publishState(this.active);
+    return this.active.controller.signal;
+  }
+  async boundary(ok) {
+    const active = this.requireActive();
+    active.lastOk = ok;
+    if (active.controller.signal.aborted)
+      return { operation: "abort" };
+    if (!active.policy.boundary)
+      return { operation: "continue" };
+    active.state = "boundary";
+    active.version += 1;
+    this.publishState(active);
+    return await new Promise((resolve2) => {
+      const settle = (decision) => {
+        clearTimeout(timer);
+        resolve2(decision);
+      };
+      const timer = setTimeout(() => {
+        if (active.resolve !== settle)
+          return;
+        active.resolve = undefined;
+        this.acceptDefault(active, resolve2);
+      }, active.policy.timeoutMs);
+      timer.unref?.();
+      active.resolve = settle;
+    });
+  }
+  nextAttempt() {
+    const active = this.requireActive();
+    active.attempts += 1;
+    active.state = "running";
+    active.version += 1;
+    active.controller = new AbortController;
+    this.publishState(active);
+    return active.controller.signal;
+  }
+  complete() {
+    const active = this.active;
+    if (active === undefined)
+      return;
+    active.state = "completed";
+    active.version += 1;
+    active.resolve = undefined;
+    this.publishState(active);
+  }
+  submit(command) {
+    const active = this.active;
+    if (command.commandId.trim() === "")
+      return this.reject(command, active, "command id is required");
+    if (this.seen.has(command.commandId))
+      return this.reject(command, active, "duplicate command");
+    this.seen.add(command.commandId);
+    if (active === undefined)
+      return this.reject(command, active, "no active action");
+    if (!this.allowedActors.has(command.actor))
+      return this.reject(command, active, "unauthorized actor");
+    const deadlineMs = Date.parse(command.deadlineAt);
+    if (!Number.isFinite(deadlineMs))
+      return this.reject(command, active, "invalid command deadline");
+    if (deadlineMs < Date.now())
+      return this.reject(command, active, "command deadline elapsed");
+    if (command.runId !== active.runId || command.actionId !== active.actionId) {
+      return this.reject(command, active, "target does not match the active action");
+    }
+    if (command.expectedState !== active.state || command.expectedVersion !== active.version) {
+      return this.reject(command, active, "stale state or version");
+    }
+    if (active.state === "completed") {
+      return this.reject(command, active, "completed action history is immutable");
+    }
+    if (command.operation === "abort") {
+      active.controller.abort();
+      active.resolve?.({ operation: "abort" });
+      active.resolve = undefined;
+      return this.accept(command, active);
+    }
+    if (active.state !== "boundary" || active.resolve === undefined) {
+      return this.reject(command, active, "action is not paused at a steering boundary");
+    }
+    if (command.operation === "retry") {
+      const retry = active.policy.retry;
+      if (active.lastOk)
+        return this.reject(command, active, "retry requires a failed attempt");
+      if (retry === undefined || retry.idempotent !== true) {
+        return this.reject(command, active, "unsafe retry: no explicit idempotent retry policy");
+      }
+      if (active.attempts >= retry.maxAttempts) {
+        return this.reject(command, active, "retry limit reached");
+      }
+    }
+    if (command.operation === "note" && (command.note === undefined || command.note.trim() === "")) {
+      return this.reject(command, active, "note text is required");
+    }
+    const note = command.operation === "note" && command.note !== undefined ? redactAndBound(command.note, this.secrets, 1024) : undefined;
+    active.resolve({ operation: command.operation, ...note !== undefined ? { note } : {} });
+    active.resolve = undefined;
+    return this.accept(command, active, note);
+  }
+  submitLine(line, deadlineMs = 30000) {
+    const active = this.active;
+    if (active === undefined)
+      return;
+    const trimmed = line.trim();
+    const [rawOperation, ...rest] = trimmed.split(/\s+/);
+    if (!["continue", "note", "retry", "abort"].includes(rawOperation ?? ""))
+      return;
+    const operation = rawOperation;
+    return this.submit({
+      commandId: crypto.randomUUID(),
+      runId: active.runId,
+      actionId: active.actionId,
+      expectedState: active.state,
+      expectedVersion: active.version,
+      operation,
+      ...operation === "note" ? { note: rest.join(" ") } : {},
+      actor: "operator",
+      deadlineAt: new Date(Date.now() + deadlineMs).toISOString()
+    });
+  }
+  acceptDefault(active, resolve2) {
+    const command = {
+      commandId: crypto.randomUUID(),
+      runId: active.runId,
+      actionId: active.actionId,
+      expectedState: active.state,
+      expectedVersion: active.version,
+      operation: "continue",
+      actor: "system-timeout",
+      deadlineAt: new Date().toISOString()
+    };
+    const ack = {
+      schemaVersion: 1,
+      commandId: command.commandId,
+      runId: command.runId,
+      actionId: command.actionId,
+      operation: command.operation,
+      actor: command.actor,
+      accepted: true,
+      state: active.state,
+      version: active.version,
+      reason: "boundary timeout defaulted to continue",
+      at: new Date().toISOString()
+    };
+    this.onAck?.(ack);
+    resolve2({ operation: "continue" });
+  }
+  accept(command, active, note) {
+    return this.publish({
+      schemaVersion: 1,
+      commandId: command.commandId,
+      runId: command.runId,
+      actionId: command.actionId,
+      operation: command.operation,
+      actor: command.actor,
+      accepted: true,
+      state: active.state,
+      version: active.version,
+      ...note !== undefined ? { note } : {},
+      at: new Date().toISOString()
+    });
+  }
+  reject(command, active, reason) {
+    return this.publish({
+      schemaVersion: 1,
+      commandId: command.commandId,
+      runId: command.runId,
+      actionId: command.actionId,
+      operation: command.operation,
+      actor: command.actor,
+      accepted: false,
+      state: active?.state ?? "completed",
+      version: active?.version ?? 0,
+      reason,
+      at: new Date().toISOString()
+    });
+  }
+  publish(ack) {
+    this.onAck?.(ack);
+    return ack;
+  }
+  requireActive() {
+    if (this.active === undefined)
+      throw new Error("no active steering action");
+    return this.active;
+  }
+  publishState(active) {
+    this.onState?.({
+      runId: active.runId,
+      actionId: active.actionId,
+      state: active.state,
+      version: active.version
+    });
+  }
+}
+function parseSteeringPolicy(options) {
+  const boundary2 = options.steeringBoundary === true;
+  const timeoutMs = typeof options.steeringTimeoutMs === "number" && Number.isFinite(options.steeringTimeoutMs) && Number.isInteger(options.steeringTimeoutMs) && options.steeringTimeoutMs > 0 ? Math.min(options.steeringTimeoutMs, MAX_STEERING_TIMEOUT_MS) : 30000;
+  const rawRetry = options.retryPolicy;
+  const retry = typeof rawRetry === "object" && rawRetry !== null && "idempotent" in rawRetry && rawRetry.idempotent === true && "maxAttempts" in rawRetry && typeof rawRetry.maxAttempts === "number" && Number.isFinite(rawRetry.maxAttempts) && Number.isInteger(rawRetry.maxAttempts) && rawRetry.maxAttempts > 1 ? { idempotent: true, maxAttempts: Math.min(rawRetry.maxAttempts, MAX_STEERING_ATTEMPTS) } : undefined;
+  return { boundary: boundary2, timeoutMs, ...retry !== undefined ? { retry } : {} };
+}
+var MAX_STEERING_TIMEOUT_MS = 300000, MAX_STEERING_ATTEMPTS = 10;
+var init_steering = __esm(() => {
+  init_agent_execution();
+});
+
 // ../../packages/app/src/workflow/actions/agent-run.ts
 import { execFile } from "child_process";
 import { existsSync as existsSync7 } from "fs";
@@ -66282,9 +67044,13 @@ import { dirname as dirname11, isAbsolute as isAbsolute2, join as join12 } from
 import { promisify as promisify3 } from "util";
 
 class AgentRunActionRunner {
+  observabilityBus;
+  steeringController;
   kind = KIND;
   agentService;
-  constructor(agentService) {
+  constructor(agentService, observabilityBus, steeringController) {
+    this.observabilityBus = observabilityBus;
+    this.steeringController = steeringController;
     this.agentService = agentService;
   }
   async execute(options, context4) {
@@ -66327,7 +67093,44 @@ class AgentRunActionRunner {
     const expectFile = asOptionalString(options.expectFile);
     const capture = asOptionalBoolean(options.capture) || answerFile !== undefined;
     const agentLabel = agent ?? "<default>";
-    const traced = await this.agentService.runTraced(input, flags);
+    const observer = this.observabilityBus === undefined ? undefined : (event2) => {
+      this.observabilityBus?.emit("workflow.agent", event2);
+    };
+    const actionId = context4.actionId ?? `${context4.runId}:${context4.stateOrNodeId}`;
+    const steeringPolicy = parseSteeringPolicy(options);
+    let steeringSignal = this.steeringController?.begin(context4.runId, actionId, steeringPolicy);
+    let steeringNote;
+    let traced;
+    while (true) {
+      traced = await this.agentService.runTraced(input, flags, undefined, {
+        correlation: {
+          runId: context4.runId,
+          executionId: crypto.randomUUID(),
+          actionId
+        },
+        ...observer !== undefined ? { observer } : {},
+        ...steeringSignal !== undefined ? { signal: steeringSignal } : {}
+      });
+      if (this.steeringController === undefined)
+        break;
+      const decision = await this.steeringController.boundary(traced.exitCode === 0);
+      if (decision.operation === "retry") {
+        steeringSignal = this.steeringController.nextAttempt();
+        continue;
+      }
+      if (decision.operation === "note")
+        steeringNote = decision.note;
+      if (decision.operation === "abort" && traced.exitCode === 0) {
+        traced = {
+          ...traced,
+          exitCode: 3,
+          signal: "STEERING_ABORT",
+          message: "aborted at steering boundary"
+        };
+      }
+      break;
+    }
+    this.steeringController?.complete();
     const { exitCode, stdout: answer } = traced;
     const ok = exitCode === 0;
     const invocation = traced.invocation;
@@ -66355,7 +67158,10 @@ class AgentRunActionRunner {
       ok,
       data: buildResultData(exitCode, agentLabel, capture, answer, invocation),
       error: error51,
-      setVars: ok ? { __agentSession: "open" } : undefined
+      setVars: ok ? {
+        __agentSession: "open",
+        ...steeringNote !== undefined ? { __steeringNote: steeringNote } : {}
+      } : undefined
     };
   }
 }
@@ -66463,6 +67269,7 @@ ${text4.slice(text4.length - maxChars)}`;
 }
 var execFileAsync, PARTIAL_ARTIFACT_TAIL_CHARS = 4000, KIND = "agent.run";
 var init_agent_run = __esm(() => {
+  init_steering();
   execFileAsync = promisify3(execFile);
 });
 
@@ -66991,7 +67798,7 @@ var init_rule_check = __esm(() => {
 // ../../packages/app/src/workflow/builtins.ts
 function registerSpurBuiltins(host, options) {
   const fileSystem = options.fileSystem ?? createNodeFileSystem3();
-  host.registerAction(new AgentRunActionRunner(options.agentService), "builtin");
+  host.registerAction(new AgentRunActionRunner(options.agentService, options.observabilityBus, options.steeringController), "builtin");
   host.registerAction(new RuleCheckActionRunner(options.ruleService), "builtin");
   host.registerAction(new FileExistsActionRunner(fileSystem), "builtin");
   host.registerAction(new FileReadActionRunner(fileSystem), "builtin");
@@ -67017,56 +67824,125 @@ var init_builtins2 = __esm(() => {
 });
 
 // ../../packages/app/src/workflow/observability.ts
+function bounded(value) {
+  const redacted = value.replace(SECRET_PATTERN2, "[REDACTED]");
+  return redacted.length <= MAX_FIELD_LENGTH ? redacted : `${redacted.slice(0, MAX_FIELD_LENGTH)}\u2026`;
+}
+function projectActionMetadata(kind, options) {
+  if (options === undefined)
+    return;
+  const metadata = {};
+  if (typeof options.agent === "string" && options.agent !== "")
+    metadata.agent = bounded(options.agent);
+  if (typeof options.model === "string" && options.model !== "")
+    metadata.model = bounded(options.model);
+  if (typeof options.timeoutMs === "number" && Number.isFinite(options.timeoutMs)) {
+    metadata.timeoutMs = Math.max(0, options.timeoutMs);
+  }
+  const input = typeof options.input === "string" ? options.input.trim() : "";
+  if (kind === "agent.run" && input !== "") {
+    const command = input.startsWith("/") ? input.split(/\s+/, 1)[0] : undefined;
+    metadata.invocation = command === undefined ? `[prompt ${input.length} chars]` : bounded(command);
+  } else if (kind === "shell" && typeof options.command === "string") {
+    metadata.invocation = "[shell command redacted]";
+  }
+  return Object.keys(metadata).length === 0 ? undefined : metadata;
+}
+function projectResult(result) {
+  if (result === undefined)
+    return;
+  if (typeof result !== "object" || result === null)
+    return { usage: "unavailable" };
+  const error51 = "error" in result && typeof result.error === "string" ? bounded(result.error) : undefined;
+  return { ...error51 !== undefined ? { error: error51 } : {}, usage: "unavailable" };
+}
+
 class ObservableWorkflowAdapter {
   inner;
   bus;
+  sequences = new Map;
+  workflowNames = new Map;
+  actions = new Map;
   constructor(inner, bus) {
     this.inner = inner;
     this.bus = bus;
   }
   async createRun(record2) {
     await this.inner.createRun(record2);
+    this.workflowNames.set(record2.id, record2.workflow_name);
     await this.bus.emit("workflow.run.started", {
-      runId: record2.id,
-      workflowName: record2.workflow_name,
-      at: now()
+      ...this.envelope(record2.id),
+      workflowName: record2.workflow_name
     });
   }
   async finalizeRun(runId, status, completedAt) {
     await this.inner.finalizeRun(runId, status, completedAt);
-    await this.bus.emit("workflow.run.finalized", { runId, status, at: completedAt });
+    await this.bus.emit("workflow.run.finalized", { ...this.envelope(runId, completedAt), status });
   }
   async savePhase(runId, phase, status) {
     await this.inner.savePhase(runId, phase, status);
-    await this.bus.emit("workflow.phase", { runId, phase, status, at: now() });
+    await this.bus.emit("workflow.phase", { ...this.envelope(runId), phase, status });
   }
   async saveTransition(runId, from, to, trigger) {
     await this.inner.saveTransition(runId, from, to, trigger);
-    await this.bus.emit("workflow.transition", { runId, from, to, trigger, at: now() });
+    await this.bus.emit("workflow.transition", { ...this.envelope(runId), from, to, trigger });
   }
   async commitTransition(runId, from, to, trigger, _state, _data, phase) {
     await this.inner.commitTransition(runId, from, to, trigger, _state, _data, phase);
-    await this.bus.emit("workflow.transition", { runId, from, to, trigger, at: now() });
+    await this.bus.emit("workflow.transition", { ...this.envelope(runId), from, to, trigger });
     if (phase) {
-      await this.bus.emit("workflow.phase", { runId, phase: phase.phase, status: phase.status, at: now() });
+      await this.bus.emit("workflow.phase", {
+        ...this.envelope(runId),
+        phase: phase.phase,
+        status: phase.status
+      });
     }
   }
-  async saveActionStart(runId, node, kind) {
-    const actionId = await this.inner.saveActionStart(runId, node, kind);
-    await this.bus.emit("workflow.action.started", { runId, actionId, node, kind, at: now() });
+  async saveActionStart(runId, node, kind, options) {
+    const actionId = await this.inner.saveActionStart(runId, node, kind, options);
+    this.actions.set(actionId, { runId, node, kind });
+    const metadata = projectActionMetadata(kind, options);
+    await this.bus.emit("workflow.action.started", {
+      ...this.envelope(runId),
+      actionId,
+      node,
+      kind,
+      ...metadata !== undefined ? { metadata } : {}
+    });
     return actionId;
   }
   async saveActionFinalize(actionId, status, durationMs, ok, result, redactor) {
     await this.inner.saveActionFinalize(actionId, status, durationMs, ok, result, redactor);
+    const action = this.actions.get(actionId);
+    if (action === undefined) {
+      return;
+    }
+    this.actions.delete(actionId);
+    const projected = projectResult(result);
     await this.bus.emit("workflow.action.finished", {
-      runId: "",
+      ...this.envelope(action.runId),
       actionId,
       status,
       durationMs,
       ok,
-      at: now()
+      node: action.node,
+      kind: action.kind,
+      ...projected !== undefined ? { result: projected } : {}
     });
   }
+  envelope(runId, at = now()) {
+    const sequence = (this.sequences.get(runId) ?? 0) + 1;
+    this.sequences.set(runId, sequence);
+    const workflowName = this.workflowNames.get(runId);
+    return {
+      schemaVersion: 1,
+      eventId: crypto.randomUUID(),
+      sequence,
+      runId,
+      ...workflowName !== undefined ? { workflowName } : {},
+      at
+    };
+  }
   saveWorkflowState(runId, state, data) {
     return this.inner.saveWorkflowState(runId, state, data);
   }
@@ -67088,11 +67964,17 @@ class ObservableWorkflowAdapter {
   loadCurrentState(runId) {
     return this.inner.loadCurrentState(runId);
   }
+  loadLatestStateSnapshot(runId) {
+    return this.inner.loadLatestStateSnapshot(runId);
+  }
   listPausedRuns(options) {
     return this.inner.listPausedRuns(options);
   }
 }
-var now = () => new Date().toISOString();
+var now = () => new Date().toISOString(), MAX_FIELD_LENGTH = 256, SECRET_PATTERN2;
+var init_observability = __esm(() => {
+  SECRET_PATTERN2 = /(?:sk-[a-z0-9_-]{8,}|(?:api[_-]?key|token|secret|password)\s*[:=]\s*\S+|bearer\s+\S+)/gi;
+});
 
 // ../../packages/app/src/services/workflow-service.ts
 import { access as access2, lstat, readdir as readdir3, readFile as readFile2, realpath } from "fs/promises";
@@ -67187,14 +68069,16 @@ class WorkflowAppService {
     const eventsBus = this.ctx.events?.();
     const svc = await this.createEngineService({
       recordSelfPid: opts.recordSelfPid === true,
-      events: eventsBus
+      events: eventsBus,
+      steeringController: opts.steeringController
     });
     const runId = opts.runId ?? crypto.randomUUID();
     const isDry = opts.dryRun === true;
+    const runVars = { ...opts.vars ?? {}, __runId: runId };
     const result = await svc.runFile(file2, {
       workdir: this.ctx.cwd,
       runId,
-      ...opts.vars ? { vars: opts.vars } : {},
+      vars: runVars,
       ...isDry ? { dryRun: true } : {},
       ...eventsBus !== undefined ? { events: bridgeEventBus(eventsBus) } : {}
     });
@@ -67202,6 +68086,7 @@ class WorkflowAppService {
       const db2 = await this.ctx.getDb();
       await new RunDao(db2).stampMetadata(runId, { dryRun: true });
     }
+    await this.stampFailureReason(runId, result);
     await this.maybeLinkPipelineRun(file2, runId, opts);
     return result;
   }
@@ -67282,8 +68167,16 @@ class WorkflowAppService {
       throw new Error(`Cannot resume run "${runId}": workflow definition "${target.workflow_name}" not found in the workflow search paths.`);
     }
     const result = await svc.resumeRun(workflow, runId, { workdir: this.ctx.cwd });
+    await this.stampFailureReason(runId, result);
     return result;
   }
+  async stampFailureReason(runId, result) {
+    if (result.status !== "failed" || typeof result.reason !== "string" || result.reason === "") {
+      return;
+    }
+    const db2 = await this.ctx.getDb();
+    await new RunDao(db2).stampFailureReason(runId, result.reason);
+  }
   async resolveWorkflowDefByName(name) {
     const listing = await this.list();
     const entry = listing.entries.find((e) => e.name === name && e.valid);
@@ -67409,19 +68302,21 @@ class WorkflowAppService {
   }
   async createEngineService(opts = {}) {
     const host = createDefaultWorkflowEngineHost();
+    const bus = this.ctx.observabilityBus?.();
     registerSpurBuiltins(host, {
       agentService: this.ctx.agentService(),
       ruleService: this.ctx.ruleService(),
       hitlResponder: this.ctx.hitlResponder(),
       httpRequester: this.ctx.httpRequester?.(),
-      hostAllowlist: this.ctx.hostAllowlist?.()
+      hostAllowlist: this.ctx.hostAllowlist?.(),
+      ...bus !== undefined ? { observabilityBus: bus } : {},
+      ...opts.steeringController !== undefined ? { steeringController: opts.steeringController } : {}
     });
     const db2 = await this.ctx.getDb();
     let persistence2 = new DbWorkflowPersistenceAdapter(db2);
     if (opts.recordSelfPid === true) {
       persistence2 = withSelfPidRecording(persistence2, db2);
     }
-    const bus = this.ctx.observabilityBus?.();
     const adapter = bus ? new ObservableWorkflowAdapter(persistence2, bus) : persistence2;
     return new WorkflowService(host, adapter);
   }
@@ -67487,9 +68382,13 @@ async function extractWorkflowMeta(filePath) {
 }
 function rowToTraceEntry(row) {
   let isDryRun = false;
+  let failureReason;
   try {
     const meta3 = JSON.parse(row.metadata_json);
     isDryRun = meta3.dryRun === true;
+    if (typeof meta3.failureReason === "string" && meta3.failureReason !== "") {
+      failureReason = meta3.failureReason;
+    }
   } catch {}
   return {
     runId: row.id,
@@ -67498,7 +68397,8 @@ function rowToTraceEntry(row) {
     status: row.status,
     startedAt: row.started_at,
     completedAt: row.completed_at,
-    isDryRun
+    isDryRun,
+    ...failureReason !== undefined ? { failureReason } : {}
   };
 }
 var TASK_PIPELINE_WORKFLOW = "task-pipeline", EMBEDDED_SCHEMA_PREFIX = "\x00embedded-spur", SPUR_SCHEMA_MANIFEST = "@gobing-ai/spur/package.json", PIPELINE_LINK_KIND = "pipeline";
@@ -67507,6 +68407,7 @@ var init_workflow_service = __esm(() => {
   init_dist7();
   init_dist5();
   init_builtins2();
+  init_observability();
 });
 
 // ../../packages/app/src/workflow/lifecycle-adapter.ts
@@ -67654,19 +68555,72 @@ var init_lifecycle_adapter = __esm(() => {
 });
 
 // ../../packages/app/src/workflow/step-reporter.ts
-function renderStepLine(event2) {
+function renderStepLine(event2, options = {}) {
+  const detail = options.detail ?? "invocation";
+  if (isAgentExecution(event2)) {
+    if (event2.kind === "output") {
+      if (detail === "minimal")
+        return null;
+      const label = event2.stream === "stderr" ? "stderr" : "stdout";
+      return `[run ${event2.runId}]   ${label}> ${event2.chunk.replace(/\s+$/, "")}`;
+    }
+    if (event2.kind === "heartbeat") {
+      if (detail === "minimal")
+        return null;
+      const budget = event2.timeoutMs === undefined ? "unbounded" : `${formatDuration(Math.max(0, event2.timeoutMs - event2.elapsedMs))} remaining`;
+      return `[run ${event2.runId}] \u2026 agent execution \xB7 elapsed=${formatDuration(event2.elapsedMs)} \xB7 budget=${budget}`;
+    }
+    if (event2.kind === "dropped") {
+      return detail === "minimal" ? null : `[run ${event2.runId}] \u2026 output pressure \xB7 dropped=${event2.chunks} chunks`;
+    }
+    if (event2.kind === "started") {
+      if (detail === "minimal")
+        return null;
+      const model = event2.model === undefined ? "" : `(${event2.model})`;
+      const full2 = detail === "full" ? ` \xB7 execution=${event2.executionId}` : "";
+      return `[run ${event2.runId}]   agent=${event2.agent}${model} => ${event2.invocation}${full2}`;
+    }
+    const mark = event2.outcome === "done" ? "\u2713" : "\u2717";
+    const full = detail === "full" ? ` \xB7 execution=${event2.executionId}` : "";
+    return detail === "minimal" ? null : `[run ${event2.runId}] ${mark} agent ${event2.outcome} (${formatDuration(event2.durationMs)}) \xB7 usage ${event2.usage}${event2.reason ? ` \xB7 ${event2.reason}` : ""}${full}`;
+  }
   if (isActionFinished(event2)) {
     const mark = event2.ok ? "\u2713" : "\u2717";
-    return `  ${mark} ${event2.status} (${formatDuration(event2.durationMs)})`;
+    if (detail === "minimal")
+      return `  ${mark} ${event2.status} (${formatDuration(event2.durationMs)})`;
+    const failure = event2.result?.error === undefined ? "" : ` \xB7 ${event2.result.error}`;
+    const full = detail === "full" ? ` \xB7 action=${event2.actionId} \xB7 seq=${event2.sequence}` : "";
+    return `[run ${event2.runId}] ${mark} ${event2.node}/${event2.kind} (${formatDuration(event2.durationMs)}) \xB7 usage ${event2.result?.usage ?? "unavailable"}${failure}${full}`;
   }
   if (isActionStarted(event2)) {
-    return `  \u2192 ${event2.node}: ${event2.kind}\u2026`;
+    if (detail === "minimal")
+      return `  \u2192 ${event2.node}: ${event2.kind}\u2026`;
+    const agent = event2.metadata?.agent ?? "unavailable";
+    const model = event2.metadata?.model ?? "unavailable";
+    const invocation = event2.metadata?.invocation ?? "unavailable";
+    const timeout = event2.metadata?.timeoutMs === undefined ? "unbounded" : formatDuration(event2.metadata.timeoutMs);
+    const full = detail === "full" ? ` \xB7 action=${event2.actionId} \xB7 seq=${event2.sequence}` : "";
+    return `[run ${event2.runId}] \u2192 ${event2.node}/${event2.kind} \xB7 agent=${agent} \xB7 model=${model} => ${invocation} \xB7 timeout=${timeout}${full}`;
   }
   if (isPhase(event2)) {
-    return `\u25B6 ${event2.phase} [${event2.status}]`;
+    return detail === "minimal" ? `\u25B6 ${event2.phase} [${event2.status}]` : `[run ${event2.runId}] \u25B6 ${event2.phase} [${event2.status}]`;
+  }
+  if (isTransition(event2)) {
+    if (detail !== "full")
+      return null;
+    return `[run ${event2.runId}] \u21AA ${event2.from} \u2192 ${event2.to}${event2.trigger ? ` [${event2.trigger}]` : ""} \xB7 seq=${event2.sequence}`;
   }
   return null;
 }
+function renderActionHeartbeat(event2, elapsedMs, options = {}) {
+  const detail = options.detail ?? "invocation";
+  if (detail === "minimal")
+    return null;
+  const elapsed = formatDuration(elapsedMs);
+  const budget = event2.metadata?.timeoutMs === undefined ? "unbounded" : `${formatDuration(Math.max(0, event2.metadata.timeoutMs - elapsedMs))} remaining`;
+  const full = detail === "full" ? ` \xB7 action=${event2.actionId}` : "";
+  return `[run ${event2.runId}] \u2026 ${event2.node}/${event2.kind} \xB7 elapsed=${elapsed} \xB7 budget=${budget}${full}`;
+}
 function renderRunPlan(def) {
   const steps = def.kind === "transition-flow" ? def.nodes.map((n2) => n2.id) : def.states.map((s) => s.id);
   return `plan: ${steps.join(" \u2192 ")}`;
@@ -67679,7 +68633,49 @@ function formatDuration(ms) {
   const seconds = totalSeconds % 60;
   return `${minutes}m ${seconds}s`;
 }
-var isActionStarted = (e) => ("kind" in e) && ("node" in e), isActionFinished = (e) => ("durationMs" in e) && ("ok" in e), isPhase = (e) => ("phase" in e);
+var isAgentExecution = (e) => ("executionId" in e), isActionStarted = (e) => ("kind" in e) && ("node" in e), isActionFinished = (e) => ("durationMs" in e) && ("ok" in e), isPhase = (e) => ("phase" in e), isTransition = (e) => ("from" in e) && ("to" in e);
+
+// ../../packages/app/src/workflow/trace-writer.ts
+import { appendFile, mkdir as mkdir2 } from "fs/promises";
+import { dirname as dirname12, join as join14 } from "path";
+
+class WorkflowTraceWriter {
+  path;
+  sequence = 0;
+  pending = Promise.resolve();
+  constructor(cwd, runId) {
+    const safeRunId = runId.replace(/[^A-Za-z0-9._-]/g, "_");
+    this.path = join14(cwd, ".spur", "runs", "workflow", `${safeRunId}.jsonl`);
+  }
+  attach(bus) {
+    bus.on("workflow.run.started", (event2) => this.enqueue("workflow.run.started", event2));
+    bus.on("workflow.run.finalized", (event2) => this.enqueue("workflow.run.finalized", event2));
+    bus.on("workflow.phase", (event2) => this.enqueue("workflow.phase", event2));
+    bus.on("workflow.transition", (event2) => this.enqueue("workflow.transition", event2));
+    bus.on("workflow.action.started", (event2) => this.enqueue("workflow.action.started", event2));
+    bus.on("workflow.action.finished", (event2) => this.enqueue("workflow.action.finished", event2));
+    bus.on("workflow.agent", (event2) => this.enqueue("workflow.agent", event2));
+    bus.on("workflow.steering", (event2) => this.enqueue("workflow.steering", event2));
+  }
+  async flush() {
+    await this.pending;
+  }
+  enqueue(type, event2) {
+    this.sequence += 1;
+    const line = `${JSON.stringify({
+      traceSchemaVersion: 1,
+      traceSequence: this.sequence,
+      type,
+      event: event2
+    })}
+`;
+    this.pending = this.pending.then(async () => {
+      await mkdir2(dirname12(this.path), { recursive: true });
+      await appendFile(this.path, line, "utf8");
+    });
+  }
+}
+var init_trace_writer = () => {};
 
 // ../../packages/app/src/index.ts
 var exports_src2 = {};
@@ -67693,11 +68689,14 @@ __export(exports_src2, {
   renderSolutionFromDiff: () => renderSolutionFromDiff,
   renderRunPlan: () => renderRunPlan,
   renderReview: () => renderReview,
+  renderActionHeartbeat: () => renderActionHeartbeat,
   registerSystemEventTap: () => registerSystemEventTap,
   registerSpurBuiltins: () => registerSpurBuiltins,
+  redactAndBound: () => redactAndBound,
   readVerdictArtifact: () => readVerdictArtifact,
   readVerdict: () => readVerdict,
   parseVerdict: () => parseVerdict,
+  parseSteeringPolicy: () => parseSteeringPolicy,
   parsePsOutput: () => parsePsOutput,
   parseLedgerLine: () => parseLedgerLine,
   parseEtimeToSeconds: () => parseEtimeToSeconds,
@@ -67713,11 +68712,14 @@ __export(exports_src2, {
   evaluateDoneTransition: () => evaluateDoneTransition,
   deriveVerdict: () => deriveVerdict,
   createPsProcessInspector: () => createPsProcessInspector,
+  configuredSecretValues: () => configuredSecretValues,
   computeAggregate: () => computeAggregate,
   classifyTaskOutcome: () => classifyTaskOutcome,
   clampToolUseLimit: () => clampToolUseLimit,
   bridgeEventBus: () => bridgeEventBus,
   aggregateBatchVerdicts: () => aggregateBatchVerdicts,
+  WorkflowTraceWriter: () => WorkflowTraceWriter,
+  WorkflowSteeringController: () => WorkflowSteeringController,
   WorkflowAppService: () => WorkflowAppService,
   UnsupportedProcessPlatformError: () => UnsupportedProcessPlatformError,
   TokenLedgerWatcher: () => TokenLedgerWatcher,
@@ -67773,11 +68775,13 @@ __export(exports_src2, {
   BusPlanningEventEmitter: () => BusPlanningEventEmitter,
   AgentService: () => AgentService,
   AgentRunActionRunner: () => AgentRunActionRunner,
+  AgentExecutionLifecycle: () => AgentExecutionLifecycle,
   ALL_FINDING_CODES: () => ALL_FINDING_CODES
 });
 var init_src3 = __esm(() => {
   init_planning_folders();
   init_errors5();
+  init_agent_execution();
   init_agent_service();
   init_corpus_migrator();
   init_event_names();
@@ -67810,6 +68814,9 @@ var init_src3 = __esm(() => {
   init_rule_check();
   init_builtins2();
   init_lifecycle_adapter();
+  init_observability();
+  init_steering();
+  init_trace_writer();
 });
 
 // ../../node_modules/.bun/sisteransi@1.0.5/node_modules/sisteransi/src/index.js
@@ -67890,19 +68897,19 @@ var {
 init_src();
 init_loader();
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/application-node.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/application-node.js
 init_dist4();
 init_dist5();
 import { appendFileSync as appendFileSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync5 } from "fs";
 import { dirname as dirname5 } from "path";
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/application/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/application/index.js
 init_default_observers();
 init_event_bus();
 init_file_observer();
 init_logger3();
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/scheduler/noop.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/scheduler/noop.js
 class NoopSchedulerAdapter {
   constructor() {}
   register(_cron, _action) {}
@@ -67910,7 +68917,7 @@ class NoopSchedulerAdapter {
   async stop() {}
 }
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/scheduler/factory.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/scheduler/factory.js
 function initScheduler(adapter, cronEntries) {
   const resolved = adapter ?? new NoopSchedulerAdapter;
   if (cronEntries) {
@@ -67921,7 +68928,7 @@ function initScheduler(adapter, cronEntries) {
   return resolved;
 }
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/application/plugins/builtins.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/application/plugins/builtins.js
 init_logger3();
 init_metrics();
 init_sdk();
@@ -68014,7 +69021,7 @@ function dbPlugin(db2) {
   };
 }
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/application/plugins/host.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/application/plugins/host.js
 init_logger3();
 
 class PluginHost {
@@ -68102,7 +69109,7 @@ class PluginHost {
   }
 }
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/application/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/application/index.js
 async function performShutdown(state, reason) {
   if (state.stopped)
     return;
@@ -68213,10 +69220,10 @@ async function runApplication(options) {
   }
 }
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/application-node.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/application-node.js
 init_scheduler_node();
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/telemetry/otel-node.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/telemetry/otel-node.js
 var import_api14 = __toESM(require_src(), 1);
 
 // ../../node_modules/.bun/@opentelemetry+exporter-metrics-otlp-http@0.218.0+e40b0dfdd726a224/node_modules/@opentelemetry/exporter-metrics-otlp-http/build/esm/OTLPMetricExporterBase.js
@@ -71232,7 +72239,7 @@ class OTLPTraceExporter extends import_otlp_exporter_base2.OTLPExporterBase {
     }), JsonTraceSerializer));
   }
 }
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/telemetry/otel-node.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/telemetry/otel-node.js
 var import_resources2 = __toESM(require_src4(), 1);
 var import_sdk_trace_node = __toESM(require_src8(), 1);
 var import_semantic_conventions = __toESM(require_src2(), 1);
@@ -71283,7 +72290,7 @@ async function shutdownNodeTelemetry() {
   await Promise.all(pending);
 }
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.11+08507d81f591b81d/node_modules/@gobing-ai/ts-infra/dist/application-node.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.4.14+a32276a722fab3c8/node_modules/@gobing-ai/ts-infra/dist/application-node.js
 class ConfigValidationError extends Error {
   constructor(message) {
     super(message);
@@ -75374,7 +76381,7 @@ init_loader();
 init_src2();
 import { existsSync as existsSync8 } from "fs";
 import { homedir as homedir4 } from "os";
-import { join as join14, resolve as resolve3 } from "path";
+import { join as join15, resolve as resolve3 } from "path";
 
 // src/workflow/resolve-spur-bin.ts
 import { basename as basename2 } from "path";
@@ -75392,22 +76399,22 @@ function resolveSpurBin() {
 }
 
 // src/workflow/make-lifecycle-adapter.ts
-var GLOBAL_CONFIG_DIR = join14(".config", "spur");
+var GLOBAL_CONFIG_DIR = join15(".config", "spur");
 function globalConfigRoot(context4) {
   const override = context4.env.SPUR_GLOBAL_RULES_DIR;
-  return override !== undefined && override.length > 0 ? resolve3(context4.cwd, override) : join14(homedir4(), GLOBAL_CONFIG_DIR);
+  return override !== undefined && override.length > 0 ? resolve3(context4.cwd, override) : join15(homedir4(), GLOBAL_CONFIG_DIR);
 }
 function resolveWorkflowPath(context4, profile) {
   const bundledRoot = bundledConfigRoot();
   if (bundledRoot !== null) {
-    const bundledPath = join14(bundledRoot, "workflows", `${profile.workflowName}.yaml`);
+    const bundledPath = join15(bundledRoot, "workflows", `${profile.workflowName}.yaml`);
     if (existsSync8(bundledPath))
       return bundledPath;
   }
-  const projectPath = join14(context4.cwd, ".spur", "workflows", `${profile.workflowName}.yaml`);
+  const projectPath = join15(context4.cwd, ".spur", "workflows", `${profile.workflowName}.yaml`);
   if (existsSync8(projectPath))
     return projectPath;
-  const globalPath = join14(globalConfigRoot(context4), "workflows", `${profile.workflowName}.yaml`);
+  const globalPath = join15(globalConfigRoot(context4), "workflows", `${profile.workflowName}.yaml`);
   if (existsSync8(globalPath))
     return globalPath;
   return null;
@@ -75662,6 +76669,7 @@ function registerFeatureCommand(program2, context4) {
           strict,
           featuresDir,
           tasksDir,
+          runDir: context4.fs.resolve(".spur/run"),
           severityOverrides: resolved.severityOverrides
         });
         results.push(result);
@@ -75734,7 +76742,13 @@ async function makeService(context4, folderOverride) {
     ...lifecycle ? { lifecycle } : {},
     emitter: makePlanningEmitter(context4)
   });
-  return new FeatureService({ fs: context4.fs, writeService, featuresDir, tasksDir });
+  return new FeatureService({
+    fs: context4.fs,
+    writeService,
+    featuresDir,
+    tasksDir,
+    foldersConfig: resolved.foldersConfig
+  });
 }
 async function assertFeatureCheckPass(context4, id, folderOverride, strict) {
   const resolved = await resolvePlanningFolders(context4.fs);
@@ -75802,13 +76816,13 @@ init_loader();
 init_src2();
 init_dist10();
 import { homedir as homedir5 } from "os";
-import { join as join15, resolve as resolve4 } from "path";
+import { join as join16, resolve as resolve4 } from "path";
 
 // src/config.ts
 var CLI_CONFIG = {
   binaryName: "spur",
   binaryLabel: "spur",
-  binaryVersion: "0.3.24",
+  binaryVersion: "0.3.25",
   configDir: ".spur",
   configFile: ".spur/config.yaml",
   databaseFile: ".spur/spur.db"
@@ -75859,8 +76873,8 @@ var SCAFFOLD_MANIFEST = [
 ];
 
 // src/commands/init.ts
-var GLOBAL_CONFIG_DIR2 = join15(".config", "spur");
-var GLOBAL_RULES_DIR2 = join15(GLOBAL_CONFIG_DIR2, "rules");
+var GLOBAL_CONFIG_DIR2 = join16(".config", "spur");
+var GLOBAL_RULES_DIR2 = join16(GLOBAL_CONFIG_DIR2, "rules");
 var GLOBAL_CONFIG_EXAMPLE = "config.example.yaml";
 var GLOBAL_CONFIG_FILE2 = "config.yaml";
 var INDEXED_CONTEXT_MARKER = "## Indexed context";
@@ -75891,7 +76905,7 @@ If \`.spur/context/\` is absent, proceed normally. Never block work on its absen
 `;
 function globalRulesRoot(context4) {
   const override = context4.env.SPUR_GLOBAL_RULES_DIR;
-  return override !== undefined && override.length > 0 ? resolve4(context4.cwd, override) : join15(homedir5(), GLOBAL_RULES_DIR2);
+  return override !== undefined && override.length > 0 ? resolve4(context4.cwd, override) : join16(homedir5(), GLOBAL_RULES_DIR2);
 }
 async function writeIfNew(context4, path9, content, force, result) {
   if (!force && await context4.fs.exists(path9)) {
@@ -75908,11 +76922,11 @@ async function seedGlobalRules(context4) {
   const target = globalRulesRoot(context4);
   let written = 0;
   for (const relPath of await listBundledRuleFiles()) {
-    const destination = join15(target, relPath);
+    const destination = join16(target, relPath);
     if (await context4.fs.exists(destination))
       continue;
-    await context4.fs.ensureDir(join15(target, ...relPath.split("/").slice(0, -1)));
-    await context4.fs.writeFile(destination, await context4.fs.readFile(join15(source, relPath)));
+    await context4.fs.ensureDir(join16(target, ...relPath.split("/").slice(0, -1)));
+    await context4.fs.writeFile(destination, await context4.fs.readFile(join16(source, relPath)));
     written += 1;
   }
   return written;
@@ -75922,20 +76936,20 @@ async function seedGlobalConfig(context4) {
   if (source === null)
     return 0;
   const globalOverride = context4.env.SPUR_GLOBAL_RULES_DIR;
-  const target = globalOverride !== undefined && globalOverride.length > 0 ? resolve4(context4.cwd, globalOverride) : join15(homedir5(), GLOBAL_CONFIG_DIR2);
+  const target = globalOverride !== undefined && globalOverride.length > 0 ? resolve4(context4.cwd, globalOverride) : join16(homedir5(), GLOBAL_CONFIG_DIR2);
   let written = 0;
   for (const relPath of listBundledConfigFiles()) {
     if (relPath === GLOBAL_CONFIG_EXAMPLE)
       continue;
-    const destination = join15(target, relPath);
+    const destination = join16(target, relPath);
     if (await context4.fs.exists(destination))
       continue;
-    await context4.fs.ensureDir(join15(target, ...relPath.split("/").slice(0, -1)));
-    await context4.fs.writeFile(destination, await context4.fs.readFile(join15(source, relPath)));
+    await context4.fs.ensureDir(join16(target, ...relPath.split("/").slice(0, -1)));
+    await context4.fs.writeFile(destination, await context4.fs.readFile(join16(source, relPath)));
     written += 1;
   }
-  const examplePath = join15(source, GLOBAL_CONFIG_EXAMPLE);
-  const globalConfigPath = join15(target, GLOBAL_CONFIG_FILE2);
+  const examplePath = join16(source, GLOBAL_CONFIG_EXAMPLE);
+  const globalConfigPath = join16(target, GLOBAL_CONFIG_FILE2);
   if (await context4.fs.exists(examplePath) && !await context4.fs.exists(globalConfigPath)) {
     await context4.fs.ensureDir(target);
     await context4.fs.writeFile(globalConfigPath, await context4.fs.readFile(examplePath));
@@ -75949,7 +76963,7 @@ function registerInitCommand(program2, context4) {
     const force = options.force === true;
     const minimal = options.minimal === true;
     const projectName = options.name ?? "default";
-    const configPath = join15(context4.cwd, CLI_CONFIG.configFile);
+    const configPath = join16(context4.cwd, CLI_CONFIG.configFile);
     if (!force && await context4.fs.exists(configPath)) {
       const message = `Already initialized: ${CLI_CONFIG.configFile}. Use --force to overwrite.`;
       context4.output.write(json3 ? toJson2({ ok: false, reason: "already-initialized", config: CLI_CONFIG.configFile }) : message);
@@ -75962,7 +76976,7 @@ function registerInitCommand(program2, context4) {
       `# Generated by \`spur init\``,
       "",
       '$schema: "@gobing-ai/spur/schemas/spur-config.schema.json"',
-      `version: "1"`,
+      `version: "1.1"`,
       `name: ${projectName}`,
       "",
       "bootstrap:",
@@ -75984,13 +76998,13 @@ function registerInitCommand(program2, context4) {
     ].join(`
 `)}
 `;
-    await context4.fs.ensureDir(join15(context4.cwd, CLI_CONFIG.configDir));
+    await context4.fs.ensureDir(join16(context4.cwd, CLI_CONFIG.configDir));
     await context4.fs.writeFile(configPath, configYaml);
     result.created.push(configPath);
-    const agentsDir = join15(context4.cwd, CLI_CONFIG.configDir, "agents");
+    const agentsDir = join16(context4.cwd, CLI_CONFIG.configDir, "agents");
     await context4.fs.ensureDir(agentsDir);
-    await writeIfNew(context4, join15(agentsDir, ".gitkeep"), "", force, result);
-    const gitignorePath = join15(context4.cwd, ".gitignore");
+    await writeIfNew(context4, join16(agentsDir, ".gitkeep"), "", force, result);
+    const gitignorePath = join16(context4.cwd, ".gitignore");
     const contextEntry = ".spur/context/";
     if (await context4.fs.exists(gitignorePath)) {
       const existing = await context4.fs.readFile(gitignorePath);
@@ -76012,20 +77026,20 @@ ${contextEntry}
         for (const relPath of listBundledProjectSeedFiles()) {
           if (relPath.startsWith("templates/docs/"))
             continue;
-          const sourcePath = join15(configRoot, relPath);
+          const sourcePath = join16(configRoot, relPath);
           if (!await context4.fs.exists(sourcePath))
             continue;
-          const targetPath = join15(context4.cwd, CLI_CONFIG.configDir, relPath);
-          await context4.fs.ensureDir(join15(targetPath, ".."));
+          const targetPath = join16(context4.cwd, CLI_CONFIG.configDir, relPath);
+          await context4.fs.ensureDir(join16(targetPath, ".."));
           await writeIfNew(context4, targetPath, await context4.fs.readFile(sourcePath), force, result);
         }
         for (const entry of SCAFFOLD_MANIFEST) {
-          const sourcePath = join15(configRoot, entry.source);
+          const sourcePath = join16(configRoot, entry.source);
           if (!await context4.fs.exists(sourcePath))
             continue;
-          const baseDir = entry.root === true ? context4.cwd : join15(context4.cwd, CLI_CONFIG.configDir);
-          const targetPath = join15(baseDir, entry.target);
-          await context4.fs.ensureDir(join15(targetPath, ".."));
+          const baseDir = entry.root === true ? context4.cwd : join16(context4.cwd, CLI_CONFIG.configDir);
+          const targetPath = join16(baseDir, entry.target);
+          await context4.fs.ensureDir(join16(targetPath, ".."));
           const entryForce = entry.preserve === true ? false : force;
           let body = await context4.fs.readFile(sourcePath);
           if (entry.target === "AGENTS.md") {
@@ -76038,7 +77052,7 @@ ${contextEntry}
         }
       }
     }
-    const agentsMdPath = join15(context4.cwd, "AGENTS.md");
+    const agentsMdPath = join16(context4.cwd, "AGENTS.md");
     if (await context4.fs.exists(agentsMdPath)) {
       const existing = await context4.fs.readFile(agentsMdPath);
       if (!existing.includes(INDEXED_CONTEXT_MARKER)) {
@@ -76216,10 +77230,10 @@ function parseInterval2(raw) {
 
 // src/commands/migrate.ts
 init_src2();
-import { join as join16 } from "path";
+import { join as join17 } from "path";
 function registerMigrateCommand(program2, context4) {
   program2.command("migrate").summary("apply CLI-owned schema migrations").option("--json", "Output machine-readable JSON").action(async (options) => {
-    const migrations = await loadSqlMigrations(join16(context4.cwd, "drizzle")).catch(() => {
+    const migrations = await loadSqlMigrations(join17(context4.cwd, "drizzle")).catch(() => {
       return;
     });
     const applied = await applyCliMigrations(await context4.getDb(), migrations);
@@ -76471,7 +77485,7 @@ function formatTraceDetail(detail) {
 
 // src/commands/serve.ts
 init_src();
-import { join as join20 } from "path";
+import { join as join21 } from "path";
 
 // ../server/src/index.ts
 init_src();
@@ -76481,11 +77495,11 @@ init_src3();
 init_src();
 init_loader();
 init_src2();
-import { dirname as dirname13, isAbsolute as isAbsolute3, join as join19 } from "path";
+import { dirname as dirname14, isAbsolute as isAbsolute3, join as join20 } from "path";
 init_dist5();
 
 // ../server/src/bootstrap.ts
-import { join as join17 } from "path";
+import { join as join18 } from "path";
 
 // ../../node_modules/.bun/radash@12.1.1/node_modules/radash/dist/esm/async.mjs
 var guard = (func, shouldGuard) => {
@@ -85125,7 +86139,7 @@ function createApp(appRt, opts) {
     app.use("*", async (c3, next) => {
       const pathname = c3.req.path === "/" ? "/index.html" : c3.req.path;
       try {
-        const file2 = Bun.file(join17(webDistPath, pathname));
+        const file2 = Bun.file(join18(webDistPath, pathname));
         if (await file2.exists()) {
           const headers = new Headers({ "content-type": file2.type });
           return new Response(file2.stream(), { headers });
@@ -85138,7 +86152,7 @@ function createApp(appRt, opts) {
         return c3.json({ error: "Not Found" }, 404);
       }
       try {
-        const indexFile = Bun.file(join17(webDistPath, "index.html"));
+        const indexFile = Bun.file(join18(webDistPath, "index.html"));
         if (await indexFile.exists()) {
           return new Response(indexFile.stream(), {
             headers: { "content-type": "text/html; charset=utf-8" }
@@ -85159,7 +86173,7 @@ init_src3();
 init_src();
 init_src2();
 init_dist5();
-import { dirname as dirname12, join as join18 } from "path";
+import { dirname as dirname13, join as join19 } from "path";
 var NOOP_OUTPUT = { write: (_s) => {}, error: (_s) => {} };
 
 class LazyPlanningEventEmitter {
@@ -85194,7 +86208,7 @@ class NotConfiguredError extends Error {
 function createServerContext(appRt, options) {
   const cwd = options.cwd;
   const fs3 = options.fs;
-  const dbUrl = options.dbUrl ?? join18(cwd, DEFAULT_DATABASE_URL);
+  const dbUrl = options.dbUrl ?? join19(cwd, DEFAULT_DATABASE_URL);
   const eventsBus = options.eventsBus ?? appRt.events;
   const jobQueueEnabled = options.jobQueueEnabled ?? false;
   const folders = options.folders ?? DEFAULT_PLANNING_FOLDERS;
@@ -85228,7 +86242,7 @@ function createServerContext(appRt, options) {
       if (!dbPromise) {
         const created = (async () => {
           if (dbUrl !== IN_MEMORY_DATABASE_URL) {
-            await fs3.ensureDir(dirname12(dbUrl));
+            await fs3.ensureDir(dirname13(dbUrl));
           }
           return createMigratedDbViaRuntime({ url: dbUrl });
         })();
@@ -85265,6 +86279,7 @@ function createServerContext(appRt, options) {
           writeService: new PlanningWriteService({ fs: fs3, projectName: "spur", emitter: lazyEmitter }),
           featuresDir: folders.featuresDir,
           tasksDir: folders.tasksDir,
+          foldersConfig: folders.foldersConfig,
           projectName: "spur"
         });
       }
@@ -85494,15 +86509,15 @@ async function runTaskActionJob(ctx, env, payload, createAgentService = createTa
   }
 }
 async function resolveWebDistPath(configuredPath) {
-  const candidates = configuredPath && configuredPath.trim() !== "" ? [isAbsolute3(configuredPath) ? configuredPath : join19(process.cwd(), configuredPath)] : [
-    join19(process.cwd(), "dist/web"),
-    join19(import.meta.dir, "web"),
-    join19(dirname13(process.execPath), "web"),
-    join19(dirname13(process.execPath), "../web"),
-    join19(import.meta.dir, "../../../dist/web")
+  const candidates = configuredPath && configuredPath.trim() !== "" ? [isAbsolute3(configuredPath) ? configuredPath : join20(process.cwd(), configuredPath)] : [
+    join20(process.cwd(), "dist/web"),
+    join20(import.meta.dir, "web"),
+    join20(dirname14(process.execPath), "web"),
+    join20(dirname14(process.execPath), "../web"),
+    join20(import.meta.dir, "../../../dist/web")
   ];
   for (const candidate of candidates) {
-    if (await Bun.file(join19(candidate, "index.html")).exists()) {
+    if (await Bun.file(join20(candidate, "index.html")).exists()) {
       return candidate;
     }
   }
@@ -85518,7 +86533,7 @@ async function startServer(options, deps = defaultDeps) {
     async start(appRt) {
       const fs3 = deps.createNodeFileSystem(process.cwd());
       if (options.dbUrl && options.dbUrl !== IN_MEMORY_DATABASE_URL) {
-        await fs3.ensureDir(dirname13(options.dbUrl));
+        await fs3.ensureDir(dirname14(options.dbUrl));
       }
       let scheduler3;
       if (bootConfig.scheduler.enabled) {
@@ -85632,7 +86647,7 @@ if (false) {}
 
 // src/commands/serve.ts
 function resolveServeDbUrl(cwd, env, configuredUrl) {
-  return env.DATABASE_URL === undefined ? join20(cwd, DEFAULT_DATABASE_URL) : configuredUrl;
+  return env.DATABASE_URL === undefined ? join21(cwd, DEFAULT_DATABASE_URL) : configuredUrl;
 }
 function registerServeCommand(program2, context4) {
   program2.command("serve").summary("start the Spur web server (local fallback)").option("--port <n>", "Server port (env: PORT, default: 3000)", parseInt).option("--host <addr>", "Bind address (env: HOST, default: localhost)").option("--no-open", "Skip opening the browser").option("--cwd <path>", "Working directory", context4.cwd).option("--json", "Output { port, url, pid } and exit").action(async (options) => {
@@ -85671,7 +86686,7 @@ function registerServeCommand(program2, context4) {
 }
 
 // src/commands/status.ts
-import { join as join21 } from "path";
+import { join as join22 } from "path";
 
 // src/errors.ts
 class CommandError extends Error {
@@ -85742,8 +86757,8 @@ function registerStatusCommand(program2, context4) {
 }
 async function runStatusCore(path9, options, context4) {
   const [packageJsonExists, spurConfigExists, git, agentSpecs] = await Promise.all([
-    context4.fs.exists(join21(context4.cwd, "package.json")),
-    context4.fs.exists(join21(context4.cwd, ".spur", "config.yaml")),
+    context4.fs.exists(join22(context4.cwd, "package.json")),
+    context4.fs.exists(join22(context4.cwd, ".spur", "config.yaml")),
     gitContext(context4.cwd),
     listAgentSpecIds(context4)
   ]);
@@ -85771,14 +86786,14 @@ async function runStatusCore(path9, options, context4) {
   return status.ok ? 0 : 1;
 }
 async function listAgentSpecIds(context4) {
-  const dir = join21(context4.cwd, ".spur", "agents");
+  const dir = join22(context4.cwd, ".spur", "agents");
   if (!await context4.fs.exists(dir))
     return [];
   const entries = await context4.fs.readDir(dir);
   return entries.filter((entry) => entry.endsWith(".yaml") || entry.endsWith(".yml")).map((entry) => entry.replace(/\.ya?ml$/, "")).sort();
 }
 async function readTargetStatus(context4, targetPath) {
-  const resolved = join21(context4.cwd, targetPath);
+  const resolved = join22(context4.cwd, targetPath);
   const stat2 = await context4.fs.stat(resolved);
   if (stat2 === null)
     throw new CommandError(`status failed: path does not exist at ${resolved}`);
@@ -85790,7 +86805,7 @@ init_src3();
 init_loader();
 init_src2();
 import { existsSync as existsSync9, readFileSync as readFileSync8 } from "fs";
-import { join as join22 } from "path";
+import { join as join23 } from "path";
 // schemas/section-matrix.schema.json
 var section_matrix_schema_default = {
   $schema: "http://json-schema.org/draft-07/schema#",
@@ -85875,7 +86890,7 @@ var spur_config_schema_default = {
     },
     version: {
       type: "string",
-      description: "Config schema version. Currently '1'."
+      description: "Config schema version (string, not integer). Current recommended: '1.1' (ADR-033 executor tiers + planning blocks). '1' remains accepted for backward compatibility."
     },
     name: {
       type: "string",
@@ -85992,15 +87007,15 @@ var spur_config_schema_default = {
               },
               tier: {
                 type: "string",
-                enum: ["cheap", "standard", "capable"],
-                description: "Capability tier for stage-registry adaptive model routing (ADR-033). A stage starts on the cheapest eligible executor meeting its model_policy min_tier and escalates along the fallback chain on objective signals."
+                enum: ["cheap", "standard", "capable-1", "capable-2", "capable-3"],
+                description: "Capability tier for stage-registry adaptive model routing (ADR-033, 0343). Live values: cheap | standard | capable-1 | capable-2 | capable-3 (1=low output quality, 3=high within the capable band). A stage starts on the cheapest eligible executor meeting its model_policy min_tier. Bare legacy `capable` is accepted at runtime (zod preprocess \u2192 capable-1) during the deprecation window but is not part of this editor enum."
               }
             }
           }
         },
         "default-by-phase": {
           type: "object",
-          description: "Map of dev phase (e.g. dev-run, dev-review) to executor selector. A configured phase mapping is authoritative \u2014 a broken mapping fails fast and does NOT fall back to `default`.",
+          description: "DEPRECATED (ADR-033). Backward-compat map of dev phase (e.g. dev-run, dev-review) to executor selector. Prefer executor `tier` + stage-registry model_policy. When present, a matching phase mapping is still authoritative (fail-fast; no fall back to `default`) and shadows stage routing for that phase.",
           additionalProperties: {
             type: "string"
           }
@@ -86474,7 +87489,7 @@ ${result.content}`);
         let forcedDoneVerdict;
         if (status === "done") {
           const current = await svc.show(wbs);
-          const verdictDir = options.verdictDir ?? join22(context4.cwd, ".spur", "run");
+          const verdictDir = options.verdictDir ?? join23(context4.cwd, ".spur", "run");
           const loaded = await readVerdictArtifact(context4.fs, verdictDir, wbs);
           const guardOutcome = evaluateDoneTransition({
             wbs,
@@ -86498,10 +87513,10 @@ ${result.content}`);
             context4.setExitCode(1);
             return;
           }
-          if (guardOutcome.reason === "forced" && loaded.artifact !== undefined) {
+          if (guardOutcome.reason === "forced") {
             forcedDone = true;
             forcedDoneReason = options.reason;
-            forcedDoneVerdict = loaded.artifact.verdict;
+            forcedDoneVerdict = loaded.artifact?.verdict ?? "UNKNOWN";
           }
         }
         const result = await svc.updateStatus(wbs, status);
@@ -87015,7 +88030,7 @@ function loadTemplateContent(projectRoot, variant) {
     return templateContentCache.get(variant);
   if (templateMissSet.has(variant))
     return;
-  const localPath = join22(projectRoot, ".spur", "tasks", "templates", `${variant}.md`);
+  const localPath = join23(projectRoot, ".spur", "tasks", "templates", `${variant}.md`);
   if (existsSync9(localPath)) {
     const content = readFileSync8(localPath, "utf8");
     templateContentCache.set(variant, content);
@@ -87023,7 +88038,7 @@ function loadTemplateContent(projectRoot, variant) {
   }
   const root = bundledConfigRoot();
   if (root !== null) {
-    const templatePath = join22(root, "templates", "task", `${variant}.md`);
+    const templatePath = join23(root, "templates", "task", `${variant}.md`);
     if (existsSync9(templatePath)) {
       const content = readFileSync8(templatePath, "utf8");
       templateContentCache.set(variant, content);
@@ -87039,13 +88054,13 @@ function loadTemplateBodies(projectRoot, variant) {
   if (cached2 !== undefined)
     return cached2;
   let bodies = {};
-  const localPath = join22(projectRoot, ".spur", "tasks", "templates", `${variant}.md`);
+  const localPath = join23(projectRoot, ".spur", "tasks", "templates", `${variant}.md`);
   if (existsSync9(localPath)) {
     bodies = extractTemplateBodies(readFileSync8(localPath, "utf8"));
   } else {
     const root = bundledConfigRoot();
     if (root !== null) {
-      const templatePath = join22(root, "templates", "task", `${variant}.md`);
+      const templatePath = join23(root, "templates", "task", `${variant}.md`);
       if (existsSync9(templatePath)) {
         bodies = extractTemplateBodies(readFileSync8(templatePath, "utf8"));
       }
@@ -87087,7 +88102,7 @@ async function loadSectionMatrix(projectRoot) {
   return promise2;
 }
 async function loadSectionMatrixUncached(projectRoot) {
-  const localPath = join22(projectRoot, ".spur", "tasks", "section-matrix.yaml");
+  const localPath = join23(projectRoot, ".spur", "tasks", "section-matrix.yaml");
   if (existsSync9(localPath)) {
     const data = await loadStructuredSpurConfig(localPath, {
       validateJsonSchema: true,
@@ -87097,7 +88112,7 @@ async function loadSectionMatrixUncached(projectRoot) {
   }
   const root = bundledConfigRoot();
   if (root !== null) {
-    const matrixPath = join22(root, "tasks", "section-matrix.yaml");
+    const matrixPath = join23(root, "tasks", "section-matrix.yaml");
     if (existsSync9(matrixPath)) {
       const data = await loadStructuredSpurConfig(matrixPath, {
         validateJsonSchema: true,
@@ -87357,6 +88372,8 @@ init_dist7();
 init_dist6();
 import { spawn as spawn2 } from "child_process";
 import { resolve as resolve5 } from "path";
+import { createInterface } from "readline";
+import { setTimeout as sleep3 } from "timers/promises";
 function parseVars(raw2) {
   if (raw2 === undefined) {
     return;
@@ -87379,6 +88396,11 @@ function parseVars(raw2) {
   }
   return vars;
 }
+function submitSteeringLine(controller, output2, line) {
+  const ack = controller.submitLine(line);
+  if (ack === undefined)
+    output2.error(`[steer] ignored command: ${line}`);
+}
 async function resolveWorkflowPaths(cwd) {
   try {
     const config4 = await loadSpurConfig(cwd, { embeddedSchemas: EMBEDDED_SPUR_SCHEMAS });
@@ -87411,19 +88433,47 @@ ${result.errors.map((m) => `  - ${m}`).join(`
     }
     context4.setExitCode(result.valid ? 0 : 1);
   });
-  workflow.command("run").description("Execute a workflow definition.").argument("<file>", "Workflow YAML file").option("--run-id <id>", "Persisted run id for workflow run").option("--vars <json>", `Per-run variable overrides as a JSON object, e.g. '{"taskId":"0042"}'`).option("--dry-run", "Validate and walk transitions without executing actions").option("--async", "Start the workflow in the background and exit immediately \u2014 monitor with `spur workflow trace <run-id>`").option("--no-plan", "Suppress the run-start plan preview (synchronous runs only)").option("--json", "Output machine-readable JSON where supported").action(async (file2, options) => {
+  workflow.command("run").description("Execute a workflow definition.").argument("<file>", "Workflow YAML file").option("--run-id <id>", "Persisted run id for workflow run").option("--vars <json>", `Per-run variable overrides as a JSON object, e.g. '{"taskId":"0042"}'`).option("--dry-run", "Validate and walk transitions without executing actions").option("--async", "Start the workflow in the background and exit immediately \u2014 monitor with `spur workflow trace <run-id>`").option("--no-plan", "Suppress the run-start plan preview (synchronous runs only)").option("--quiet", "Suppress plan and per-step progress; keep the final summary").option("--silent", "Suppress all routine output; errors still set a non-zero exit status").option("--verbose", "Include transitions and correlation diagnostics in human progress").option("--detail <level>", "Human detail level: minimal, invocation, or full").option("--trace-file", "Append a redacted schema-versioned JSONL trace under .spur/runs/workflow/").option("--steer", "Accept local in-process steering commands on stdin at declared action boundaries").option("--json", "Output machine-readable JSON where supported").action(async (file2, options) => {
+    const json3 = options.json === true;
+    const silent = !json3 && options.silent === true;
+    const quiet = !json3 && options.quiet === true;
+    if (!json3 && options.quiet === true && options.verbose === true) {
+      context4.output.error("--quiet and --verbose are mutually exclusive");
+      context4.setExitCode(2);
+      return;
+    }
+    if (!json3 && options.silent === true && (options.quiet === true || options.verbose === true)) {
+      context4.output.error("--silent cannot be combined with --quiet or --verbose");
+      context4.setExitCode(2);
+      return;
+    }
+    if (options.steer === true && (json3 || options.async === true)) {
+      context4.output.error("--steer is synchronous and in-process; it cannot be combined with --json or --async");
+      context4.setExitCode(2);
+      return;
+    }
+    const requestedDetail = options.detail;
+    if (requestedDetail !== undefined && !["minimal", "invocation", "full"].includes(requestedDetail)) {
+      context4.output.error("--detail must be one of: minimal, invocation, full");
+      context4.setExitCode(2);
+      return;
+    }
+    const detail = options.verbose === true ? "full" : requestedDetail ?? "invocation";
     if (options.async) {
-      const runId = options.runId || crypto.randomUUID();
+      const runId2 = options.runId || crypto.randomUUID();
       const spurParts = resolveSpurBin().split(" ");
       const spurBin = spurParts[0] ?? process.execPath;
       const spurArgs = spurParts.slice(1);
-      const cmd = [...spurArgs, "workflow", "run", file2, "--run-id", runId];
+      const cmd = [...spurArgs, "workflow", "run", file2, "--run-id", runId2];
       if (options.vars) {
         cmd.push("--vars", options.vars);
       }
       if (options.dryRun) {
         cmd.push("--dry-run");
       }
+      if (options.traceFile) {
+        cmd.push("--trace-file");
+      }
       try {
         const child = spawn2(spurBin, cmd, {
           stdio: "ignore",
@@ -87433,50 +88483,121 @@ ${result.errors.map((m) => `  - ${m}`).join(`
         child.unref();
       } catch {
         const result2 = await makeSvc(options.json).run(file2, {
-          runId,
+          runId: runId2,
           vars: { spurBin: resolveSpurBin(), ...parseVars(options.vars) },
           dryRun: options.dryRun || undefined
         });
-        context4.output.write(options.json ? toJson2(result2) : `workflow ${result2.status}: ${result2.workflowName} -> ${result2.finalState} (async spawn failed, ran sync)`);
+        if (json3)
+          context4.output.write(toJson2(result2));
+        else if (!silent) {
+          context4.output.write(`workflow ${result2.status}: ${result2.workflowName} -> ${result2.finalState} (async spawn failed, ran sync)`);
+        }
         context4.setExitCode(result2.status === "done" ? 0 : 1);
         return;
       }
-      const asyncResult = { runId, status: "started", workflowName: file2 };
-      context4.output.write(options.json ? toJson2(asyncResult) : `Started async run: ${runId}
-Monitor with: spur workflow trace ${runId}`);
+      const asyncResult = { runId: runId2, status: "started", workflowName: file2 };
+      if (json3)
+        context4.output.write(toJson2(asyncResult));
+      else if (!silent) {
+        context4.output.write(`Started async run: ${runId2}
+Monitor with: spur workflow trace ${runId2} --follow`);
+      }
       context4.setExitCode(0);
       return;
     }
     const vars = { spurBin: resolveSpurBin(), ...parseVars(options.vars) };
-    const human = options.json !== true;
+    const runId = options.runId || crypto.randomUUID();
+    const humanProgress = !json3 && !quiet && !silent;
     let bus;
-    if (human) {
+    let traceWriter;
+    const heartbeats = new Map;
+    if (humanProgress || options.traceFile === true || options.steer === true) {
+      bus = new EventBus;
+    }
+    if (options.traceFile === true && bus !== undefined) {
+      traceWriter = new WorkflowTraceWriter(context4.cwd, runId);
+      traceWriter.attach(bus);
+    }
+    if (humanProgress && bus !== undefined) {
+      context4.output.write(`Run: ${runId}`);
       if (options.plan !== false) {
         try {
           const def = await loadWorkflowDef(resolve5(context4.cwd, file2), { validateSchema: false });
           context4.output.write(renderRunPlan(def));
         } catch {}
       }
-      bus = new EventBus;
       const report = (event2) => {
-        const line = renderStepLine(event2);
+        const line = renderStepLine(event2, { detail });
         if (line !== null)
           context4.output.write(line);
       };
       bus.on("workflow.phase", report);
-      bus.on("workflow.action.started", report);
-      bus.on("workflow.action.finished", report);
+      if (detail === "full")
+        bus.on("workflow.transition", report);
+      bus.on("workflow.action.started", (event2) => {
+        report(event2);
+        const startedAt2 = Date.parse(event2.at);
+        const timer = setInterval(() => {
+          const line = renderActionHeartbeat(event2, Math.max(0, Date.now() - startedAt2), { detail });
+          if (line !== null)
+            context4.output.write(line);
+        }, 30000);
+        timer.unref?.();
+        heartbeats.set(event2.actionId, timer);
+      });
+      bus.on("workflow.action.finished", (event2) => {
+        const timer = heartbeats.get(event2.actionId);
+        if (timer !== undefined)
+          clearInterval(timer);
+        heartbeats.delete(event2.actionId);
+        report(event2);
+      });
+      bus.on("workflow.agent", (event2) => {
+        if (event2.kind === "started" && event2.actionId !== undefined) {
+          const timer = heartbeats.get(event2.actionId);
+          if (timer !== undefined)
+            clearInterval(timer);
+          heartbeats.delete(event2.actionId);
+        }
+        report(event2);
+      });
+    }
+    const steeringController = options.steer === true ? new WorkflowSteeringController((ack) => {
+      bus?.emit("workflow.steering", ack);
+      context4.output.write(`[steer] ${ack.accepted ? "ack" : "nack"} ${ack.operation} \xB7 ${ack.reason ?? `version=${ack.version}`}`);
+    }, configuredSecretValues(context4.env), new Set(["operator"]), (snapshot) => {
+      if (snapshot.state === "boundary") {
+        context4.output.write(`[steer] boundary action=${snapshot.actionId} version=${snapshot.version} \xB7 commands: continue | note <text> | retry | abort`);
+      }
+    }) : undefined;
+    const steeringInput = steeringController === undefined ? undefined : createInterface({ input: process.stdin, terminal: process.stdin.isTTY === true });
+    if (steeringInput !== undefined && steeringController !== undefined) {
+      steeringInput.on("line", submitSteeringLine.bind(undefined, steeringController, context4.output));
+    }
+    let result;
+    try {
+      result = await makeSvc(json3, bus).run(file2, {
+        runId,
+        vars,
+        dryRun: options.dryRun || undefined,
+        recordSelfPid: process.env.SPUR_ASYNC_WORKER === "1",
+        ...steeringController !== undefined ? { steeringController } : {}
+      });
+    } finally {
+      for (const timer of heartbeats.values())
+        clearInterval(timer);
+      heartbeats.clear();
+      await traceWriter?.flush();
+      steeringInput?.close();
+    }
+    if (json3)
+      context4.output.write(toJson2(result));
+    else if (!silent) {
+      context4.output.write(`workflow ${result.status}: ${result.workflowName} -> ${result.finalState}${typeof result.reason === "string" ? ` \u2014 ${result.reason}` : ""}`);
     }
-    const result = await makeSvc(options.json, bus).run(file2, {
-      runId: options.runId || undefined,
-      vars,
-      dryRun: options.dryRun || undefined,
-      recordSelfPid: process.env.SPUR_ASYNC_WORKER === "1"
-    });
-    context4.output.write(options.json ? toJson2(result) : `workflow ${result.status}: ${result.workflowName} -> ${result.finalState}`);
     context4.setExitCode(result.status === "done" ? 0 : 1);
   });
-  workflow.command("continue").description("Resume a paused (HITL) workflow run. Omit run-id to resume the most recent paused run.").argument("[run-id]", "Run ID to resume (default: the most recent paused run)").option("--yes", "Resume without prompting for confirmation").option("--json", "Output machine-readable JSON where supported").action(async (runId, options) => {
+  workflow.command("continue").description("Resume a paused (HITL) workflow run. Omit run-id to resume the most recent paused run.").argument("[run-id]", "Run ID to resume (default: the most recent paused run)").option("--yes", "Skip the CLI resume confirmation (does not set the persisted HITL answer)").option("--json", "Output machine-readable JSON where supported").action(async (runId, options) => {
     const json3 = options.json === true;
     const svc = makeSvc(json3);
     try {
@@ -87562,7 +88683,7 @@ Monitor with: spur workflow trace ${runId}`);
       context4.output.write(formatListHuman(result));
     }
   });
-  workflow.command("trace").description("Show persisted workflow run history.").argument("[run-id]", "Run ID for per-run timeline detail").option("--workflow <name>", "Filter by workflow name").option("--status <status>", "Filter by status: done, failed, running").option("--since <iso-date>", "Filter runs started on or after this date").option("--last <n>", "Limit results (default 20)", "20").option("--json", "Output machine-readable JSON where supported").action(async (runId, options) => {
+  workflow.command("trace").description("Show persisted workflow run history.").argument("[run-id]", "Run ID for per-run timeline detail").option("--workflow <name>", "Filter by workflow name").option("--status <status>", "Filter by status: done, failed, running").option("--since <iso-date>", "Filter runs started on or after this date").option("--last <n>", "Limit results (default 20)", "20").option("--follow", "Replay a run timeline and poll persisted state until it becomes terminal").option("--poll <ms>", "Follow polling interval in milliseconds", "1000").option("--json", "Output machine-readable JSON where supported").action(async (runId, options) => {
     const svc = makeSvc();
     const last = parseInt(options.last, 10);
     if (Number.isNaN(last) || last < 1) {
@@ -87570,11 +88691,31 @@ Monitor with: spur workflow trace ${runId}`);
       context4.setExitCode(1);
       return;
     }
+    const pollMs = parseInt(options.poll, 10);
+    if (Number.isNaN(pollMs) || pollMs < 50) {
+      context4.output.error("--poll must be an integer of at least 50ms");
+      context4.setExitCode(1);
+      return;
+    }
+    if (options.follow === true && runId === undefined) {
+      context4.output.error("--follow requires a run-id");
+      context4.setExitCode(1);
+      return;
+    }
+    if (options.follow === true && options.json === true) {
+      context4.output.error("--follow is a human streaming mode and cannot be combined with --json");
+      context4.setExitCode(1);
+      return;
+    }
     if (options.status !== undefined && !["done", "failed", "running"].includes(options.status)) {
       context4.output.error("--status must be one of: done, failed, running");
       context4.setExitCode(1);
       return;
     }
+    if (options.follow === true && runId !== undefined) {
+      await followTrace(svc, runId, pollMs, (line) => context4.output.write(line));
+      return;
+    }
     const result = runId ? await svc.trace(runId) : await svc.trace({
       workflow: options.workflow,
       status: options.status,
@@ -87637,22 +88778,14 @@ function formatTraceList2(result) {
 function formatTraceTimeline(result) {
   const { run, events: events2 } = result;
   const dryLabel = run.isDryRun ? " [DRY RUN]" : "";
+  const reasonLabel = run.failureReason ? ` \u2014 ${run.failureReason}` : "";
   const lines = [
-    `Run: ${run.runId} \u2014 ${run.workflowName} (${run.mode}) \u2014 ${run.status}${dryLabel}`,
+    `Run: ${run.runId} \u2014 ${run.workflowName} (${run.mode}) \u2014 ${run.status}${dryLabel}${reasonLabel}`,
     `Started: ${run.startedAt}   Completed: ${run.completedAt ?? "-"}   Events: ${events2.length}`,
     ""
   ];
   for (const event2 of events2) {
-    if (event2.kind === "phase") {
-      const ts = event2.startedAt ?? event2.completedAt ?? "";
-      lines.push(`  ${event2.phase.padEnd(20)} ${event2.status.padEnd(10)} ${ts}`);
-    } else if (event2.kind === "transition") {
-      const guard2 = event2.trigger ? `  [${event2.trigger}]` : "";
-      lines.push(`    \u2192 ${event2.to}${guard2}`);
-    } else {
-      const costSuffix = formatActionCost(event2);
-      lines.push(`    \u26A1 ${event2.actionKind.padEnd(15)} ${event2.duration.padEnd(6)}${event2.label}${costSuffix}`);
-    }
+    lines.push(formatTimelineEvent(event2));
   }
   const hasUnjoinedCost = events2.some((e) => e.kind === "action" && e.cost !== undefined && e.cost.totals.records === 0);
   if (hasUnjoinedCost) {
@@ -87661,6 +88794,56 @@ function formatTraceTimeline(result) {
   return lines.join(`
 `).trimEnd();
 }
+function formatTimelineEvent(event2) {
+  if (event2.kind === "phase") {
+    const ts = event2.startedAt ?? event2.completedAt ?? "";
+    return `  ${event2.phase.padEnd(20)} ${event2.status.padEnd(10)} ${ts}`;
+  }
+  if (event2.kind === "transition") {
+    const guard2 = event2.trigger ? `  [${event2.trigger}]` : "";
+    return `    \u2192 ${event2.to}${guard2}`;
+  }
+  const costSuffix = formatActionCost(event2);
+  return `    \u26A1 ${event2.actionKind.padEnd(15)} ${event2.duration.padEnd(6)}${event2.label}${costSuffix}`;
+}
+async function followTrace(service, runId, pollMs, write, wait = (ms) => sleep3(ms)) {
+  let missingAttempts = 0;
+  let timeline;
+  while (true) {
+    try {
+      timeline = await service.trace(runId);
+      break;
+    } catch (error51) {
+      if (!String(error51).includes("Run not found") || missingAttempts >= 20)
+        throw error51;
+      missingAttempts++;
+      await wait(pollMs);
+    }
+  }
+  write(formatTraceTimeline(timeline));
+  const seen = new Set(timeline.events.map((event2) => JSON.stringify(event2)));
+  if (isTerminalTraceStatus(timeline.run.status))
+    return;
+  while (true) {
+    await wait(pollMs);
+    const next = await service.trace(runId);
+    for (const event2 of next.events) {
+      const fingerprint2 = JSON.stringify(event2);
+      if (seen.has(fingerprint2))
+        continue;
+      seen.add(fingerprint2);
+      write(formatTimelineEvent(event2));
+    }
+    if (isTerminalTraceStatus(next.run.status)) {
+      const reason = next.run.failureReason ? ` \u2014 ${next.run.failureReason}` : "";
+      write(`Run finalized: ${next.run.status}${reason}`);
+      return;
+    }
+  }
+}
+function isTerminalTraceStatus(status) {
+  return status !== "running" && status !== "pending";
+}
 function formatActionCost(event2) {
   if (event2.kind !== "action")
     return "";
@@ -87681,7 +88864,7 @@ init_src3();
 init_src();
 init_src2();
 init_dist5();
-import { dirname as dirname14, join as join23, resolve as resolve6 } from "path";
+import { dirname as dirname15, join as join24, resolve as resolve6 } from "path";
 import { isatty as isatty4 } from "tty";
 
 // ../../node_modules/.bun/@clack+core@1.4.1/node_modules/@clack/core/dist/index.mjs
@@ -89095,10 +90278,10 @@ function createCliContext(options) {
 function noopSetExitCode(_code) {}
 async function createMigratedDbAdapter(cwd = process.cwd(), env = process.env, dbUrl) {
   const config4 = buildConfigFromEnv(env);
-  const configuredUrl = env.DATABASE_URL === undefined ? join23(cwd, DEFAULT_DATABASE_URL) : config4.database.url;
+  const configuredUrl = env.DATABASE_URL === undefined ? join24(cwd, DEFAULT_DATABASE_URL) : config4.database.url;
   const url2 = dbUrl ?? configuredUrl;
   if (url2 !== IN_MEMORY_DATABASE_URL) {
-    await createNodeFileSystem3().ensureDir(dirname14(url2));
+    await createNodeFileSystem3().ensureDir(dirname15(url2));
   }
   return createMigratedDb({ url: url2 });
 }
@@ -89183,7 +90366,7 @@ function bannerText() {
 }
 async function runCli() {
   const argv = process.argv.slice(2);
-  if (!argv.includes("--json")) {
+  if (!argv.some((arg) => arg === "--json" || arg === "--quiet" || arg === "--silent")) {
     consoleOutput.write(bannerText());
   }
   return main();