@iowarp/clio-coder 0.3.2 → 0.3.4

package/dist/{chunk-MQSRRFWA.js → chunk-ZYKPLLNQ.js}

@@ -6,7 +6,7 @@ import {
   isAutonomyLevel,
   mapAutonomy,
   typedValidationSummary
-} from "./chunk-STBPMHSX.js";
+} from "./chunk-7RXG6QRZ.js";
 import {
   ROUTE_POLICY_VERSION,
   deriveExecutionRole,
@@ -15,36 +15,40 @@ import {
   isRoutingIntent,
   routePriorForLatencyClass,
   sameRouteIdentity
-} from "./chunk-GGXXDWE4.js";
+} from "./chunk-22NAGB7X.js";
 import {
   AGENT_AUTOMATION_AUTHORITIES,
-  agentSpecFingerprint,
+  agentSpecFingerprint
+} from "./chunk-AOCYTWAV.js";
+import {
   detectValidationCommand,
   extractCommandDeleteTargets,
   extractCommandWriteTargets,
   tokenizeShellLike,
   toolMutationPaths
-} from "./chunk-5UUP6MWO.js";
+} from "./chunk-MV3K5QF2.js";
 import {
+  expandPath,
   resolveReadPath
 } from "./chunk-OQE5J4C6.js";
-import {
-  isSkillActivation
-} from "./chunk-T6YILFSB.js";
 import {
   DEFAULT_MAX_LINES,
   OBSERVATION_POLICY_SLACK_BYTES,
   OBSERVE_SELF_CAPS,
+  deterministicDiagnosticSummary,
   finalizeObservation,
-  formatSize,
   isSessionOffloadPath,
   observationBudgetExhausted,
   reserveObservation,
   splitLinesForCounting,
   truncateHead,
   truncateTail
-} from "./chunk-VAKQQHWR.js";
+} from "./chunk-5M54SPOL.js";
 import {
+  formatSize
+} from "./chunk-OZNBF4L3.js";
+import {
+  byteLength,
   truncateUtf8
 } from "./chunk-6XLNIQDB.js";
 import {
@@ -56,12 +60,24 @@ import {
 } from "./chunk-CGKSTWHD.js";
 import {
   THINKING_LEVELS
-} from "./chunk-ZDOOVTXZ.js";
+} from "./chunk-4OC57DA6.js";
+import {
+  gitCommitAttributionEnabled,
+  reportCommitAttributionDiagnostic,
+  resolveSafeCwd,
+  withManagedGitCommitAttributionEnvironment
+} from "./chunk-VEZEGCGW.js";
+import {
+  clampTimerDelayMs
+} from "./chunk-FQ4SKYE4.js";
 import {
   GUARDRAIL_DEFAULTS,
   GUARDRAIL_ENV_VARS,
   resolveGuardrail
 } from "./chunk-4ZG3XFUR.js";
+import {
+  AI_AGENT_NAME
+} from "./chunk-6EJMN2Y3.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -137,6 +153,255 @@ function applyCodewikiWorkerPolicy(tools, context) {
   return tools.filter((tool) => !isCodewikiTool(tool));
 }
 
+// src/core/bash-exec.ts
+init_esm_shims();
+import { spawn } from "node:child_process";
+import { StringDecoder } from "node:string_decoder";
+var BASH_HARD_CAP_BYTES = 16 * 1024 * 1024;
+var CLIO_CONTROL_ENV_KEYS = ["CLIO_CODER_INTERACTIVE", "CLIO_CODER_RESUME_SESSION_ID"];
+var BASH_UPDATE_THROTTLE_MS = 100;
+function buildToolEnv() {
+  const env = { ...process.env };
+  env.AI_AGENT = AI_AGENT_NAME;
+  for (const key of CLIO_CONTROL_ENV_KEYS) {
+    Reflect.deleteProperty(env, key);
+  }
+  return env;
+}
+var LOGIN_ENV_CAPTURE_TIMEOUT_MS = 1e4;
+var loginEnvCapture = null;
+function parseNullDelimitedEnv(raw) {
+  const env = {};
+  for (const entry of raw.split("\0")) {
+    if (entry.length === 0) continue;
+    const eq = entry.indexOf("=");
+    if (eq <= 0) continue;
+    env[entry.slice(0, eq)] = entry.slice(eq + 1);
+  }
+  return typeof env.PATH === "string" && env.PATH.length > 0 ? env : null;
+}
+function captureLoginEnv() {
+  return new Promise((resolve) => {
+    let stdout = "";
+    let settled = false;
+    const finish = (value) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      resolve(value);
+    };
+    const child = spawn("/bin/bash", ["-lc", "env -0"], {
+      env: buildToolEnv(),
+      stdio: ["ignore", "pipe", "ignore"]
+    });
+    const timer = setTimeout(() => {
+      child.kill("SIGKILL");
+      finish(null);
+    }, LOGIN_ENV_CAPTURE_TIMEOUT_MS);
+    child.stdout?.on("data", (chunk) => {
+      stdout += chunk.toString("utf8");
+    });
+    child.on("error", () => finish(null));
+    child.on("close", (code) => finish(code === 0 ? parseNullDelimitedEnv(stdout) : null));
+  });
+}
+async function bashSpawnPlan() {
+  loginEnvCapture ??= captureLoginEnv();
+  const captured = await loginEnvCapture;
+  if (captured === null) return { mode: "-lc", env: buildToolEnv() };
+  const env = { ...process.env, ...captured };
+  env.AI_AGENT = AI_AGENT_NAME;
+  for (const key of CLIO_CONTROL_ENV_KEYS) {
+    Reflect.deleteProperty(env, key);
+  }
+  return { mode: "-c", env };
+}
+function combineBashOutput(result) {
+  const { stdout, stderr } = result;
+  return stderr.length > 0 ? `${stdout}${stdout.endsWith("\n") || stdout.length === 0 ? "" : "\n"}${stderr}` : stdout;
+}
+async function runBashCommand(command, options = {}) {
+  const plan = await bashSpawnPlan();
+  const attribution = withManagedGitCommitAttributionEnvironment(plan.env, {
+    cwd: options.cwd ?? process.cwd(),
+    enabled: gitCommitAttributionEnabled(process.env)
+  });
+  reportCommitAttributionDiagnostic(attribution.diagnostic);
+  return new Promise((resolve) => {
+    const timeout = clampTimerDelayMs(options.timeoutMs ?? 3e5);
+    let aborted = false;
+    let timedOut = false;
+    let settled = false;
+    let timeoutId = null;
+    let killGraceTimer = null;
+    let killSent = false;
+    let stdout = "";
+    let stderr = "";
+    const stdoutDecoder = new StringDecoder("utf8");
+    const stderrDecoder = new StringDecoder("utf8");
+    let decodersFinished = false;
+    let outputBytes = 0;
+    let outputCapped = false;
+    let updateTimer = null;
+    let updateDirty = false;
+    let lastUpdateAt = 0;
+    const child = spawn("/bin/bash", [plan.mode, command], {
+      ...options.cwd === void 0 ? {} : { cwd: options.cwd },
+      env: attribution.env,
+      detached: process.platform !== "win32",
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+    const finishDecoders = () => {
+      if (decodersFinished) return;
+      decodersFinished = true;
+      if (outputCapped) return;
+      stdout += stdoutDecoder.end();
+      stderr += stderrDecoder.end();
+    };
+    const emitUpdate = () => {
+      if (options.onUpdate === void 0 || !updateDirty) return;
+      updateDirty = false;
+      lastUpdateAt = Date.now();
+      try {
+        options.onUpdate({ stdout, stderr, outputBytes: Math.min(outputBytes, BASH_HARD_CAP_BYTES) });
+      } catch {
+      }
+    };
+    const clearUpdateTimer = () => {
+      if (updateTimer === null) return;
+      clearTimeout(updateTimer);
+      updateTimer = null;
+    };
+    const scheduleUpdate = () => {
+      if (options.onUpdate === void 0) return;
+      updateDirty = true;
+      const delay = BASH_UPDATE_THROTTLE_MS - (Date.now() - lastUpdateAt);
+      if (delay <= 0) {
+        clearUpdateTimer();
+        emitUpdate();
+        return;
+      }
+      updateTimer ??= setTimeout(() => {
+        updateTimer = null;
+        emitUpdate();
+      }, delay);
+    };
+    const finishUpdates = () => {
+      clearUpdateTimer();
+      emitUpdate();
+    };
+    if (options.onUpdate !== void 0) {
+      updateDirty = true;
+      emitUpdate();
+    }
+    const clearKillGraceTimer = () => {
+      if (!killGraceTimer) return;
+      clearTimeout(killGraceTimer);
+      killGraceTimer = null;
+    };
+    const sendSignal = (signalName) => {
+      const pid = child.pid;
+      if (pid && process.platform !== "win32") {
+        try {
+          process.kill(-pid, signalName);
+          return;
+        } catch {
+        }
+      }
+      child.kill(signalName);
+    };
+    const killChild = () => {
+      if (killSent) return;
+      killSent = true;
+      sendSignal("SIGTERM");
+      killGraceTimer = setTimeout(() => {
+        sendSignal("SIGKILL");
+      }, 5e3);
+    };
+    function onAbort() {
+      aborted = true;
+      killChild();
+    }
+    if (timeout > 0) {
+      timeoutId = setTimeout(() => {
+        timedOut = true;
+        killChild();
+      }, timeout);
+    }
+    if (options.signal?.aborted) {
+      onAbort();
+    } else {
+      options.signal?.addEventListener("abort", onAbort, { once: true });
+    }
+    const appendChunk = (target, chunk) => {
+      if (outputCapped) return;
+      const remaining = BASH_HARD_CAP_BYTES - outputBytes;
+      const accepted = chunk.byteLength <= remaining ? chunk : chunk.subarray(0, Math.max(0, remaining));
+      outputBytes += accepted.byteLength;
+      if (accepted.byteLength > 0) {
+        const decoded = target === "stdout" ? stdoutDecoder.write(accepted) : stderrDecoder.write(accepted);
+        if (target === "stdout") stdout += decoded;
+        else stderr += decoded;
+      }
+      if (accepted.byteLength < chunk.byteLength) {
+        outputCapped = true;
+        scheduleUpdate();
+        killChild();
+        return;
+      }
+      scheduleUpdate();
+    };
+    child.stdout?.on("data", (chunk) => appendChunk("stdout", chunk));
+    child.stderr?.on("data", (chunk) => appendChunk("stderr", chunk));
+    child.on("error", (error) => {
+      if (settled) return;
+      settled = true;
+      if (timeoutId) clearTimeout(timeoutId);
+      clearKillGraceTimer();
+      finishDecoders();
+      finishUpdates();
+      options.signal?.removeEventListener("abort", onAbort);
+      resolve({
+        error,
+        stdout,
+        stderr,
+        exitCode: null,
+        signal: null,
+        aborted,
+        timedOut,
+        outputCapped,
+        outputBytes
+      });
+    });
+    child.on("close", (code, signalName) => {
+      if (settled) return;
+      settled = true;
+      if (timeoutId) clearTimeout(timeoutId);
+      clearKillGraceTimer();
+      finishDecoders();
+      finishUpdates();
+      options.signal?.removeEventListener("abort", onAbort);
+      const error = code === 0 && signalName === null ? null : {
+        name: "Error",
+        message: signalName ? `command terminated by ${signalName}` : `command exited with code ${code ?? "?"}`,
+        code: code ?? void 0,
+        signal: signalName ?? void 0
+      };
+      resolve({
+        error,
+        stdout,
+        stderr,
+        exitCode: code,
+        signal: signalName,
+        aborted,
+        timedOut,
+        outputCapped,
+        outputBytes
+      });
+    });
+  });
+}
+
 // src/tools/network-policy.ts
 init_esm_shims();
 var NO_NETWORK_TOOLS_ENV = "CLIO_CODER_NO_NETWORK_TOOLS";
@@ -831,525 +1096,9 @@ function runKindSupportsLiveSteering(kind) {
   return kind === "http" || kind === "sdk";
 }
 
-// src/domains/session/task-board.ts
-init_esm_shims();
-import { randomUUID } from "node:crypto";
-
-// src/domains/session/entries.ts
-init_esm_shims();
-var SESSION_ENTRY_KINDS = [
-  "message",
-  "bashExecution",
-  "custom",
-  "modelChange",
-  "thinkingLevelChange",
-  "fileEntry",
-  "branchSummary",
-  "compactionSummary",
-  "sessionInfo",
-  "label",
-  "protectedArtifact",
-  "skillActivation",
-  "taskLedger",
-  "decisionLedger",
-  "workerRun"
-];
-function isRecord(value) {
-  return !!value && typeof value === "object";
-}
-function isString(value) {
-  return typeof value === "string";
-}
-function isOptionalString(value) {
-  return value === void 0 || typeof value === "string";
-}
-function isOptionalBoolean(value) {
-  return value === void 0 || typeof value === "boolean";
-}
-function isNumber(value) {
-  return typeof value === "number" && Number.isFinite(value);
-}
-function isPositiveInteger(value) {
-  return isNumber(value) && Number.isInteger(value) && value > 0;
-}
-function isOptionalNumber(value) {
-  return value === void 0 || isNumber(value);
-}
-function isNullableString(value) {
-  return value === null || typeof value === "string";
-}
-function isOneOf(value, allowed) {
-  return typeof value === "string" && allowed.includes(value);
-}
-function isStringArray(value) {
-  return Array.isArray(value) && value.every((item) => typeof item === "string");
-}
-function hasBaseSessionEntryFields(v) {
-  return isString(v.turnId) && isNullableString(v.parentTurnId) && isString(v.timestamp);
-}
-var MESSAGE_ROLES = ["user", "assistant", "tool_call", "tool_result", "system", "checkpoint"];
-var FILE_OPERATIONS = ["read", "write", "edit", "create", "delete"];
-var COMPACTION_TRIGGERS = ["auto", "force", "overflow"];
-var PROTECTED_ARTIFACT_SOURCES = [
-  "validation",
-  "middleware",
-  "user",
-  "session"
-];
-var TASK_LEDGER_STATUSES = ["pending", "active", "completed", "blocked", "cancelled"];
-var TASK_LEDGER_EVIDENCE_STATUSES = [
-  "required",
-  "pending",
-  "passed",
-  "failed",
-  "missing"
-];
-var DECISION_STATUSES = ["active", "superseded"];
-var DECISION_INTERVIEW_STATUSES = ["complete", "cancelled"];
-var WORKER_RUN_ORIGINS = ["user", "agent"];
-var WORKER_RUN_RUNTIME_KINDS = ["clio", "acp", "claude-sdk", "claude-code"];
-function isWorkerRunRuntime(value) {
-  if (!isRecord(value)) return false;
-  return isOneOf(value.kind, WORKER_RUN_RUNTIME_KINDS) && isOptionalString(value.targetId) && isOptionalString(value.wireModelId) && isOptionalString(value.peerId);
-}
-function isTaskLedgerGoal(value) {
-  if (!isRecord(value)) return false;
-  if (!isString(value.id) || !isString(value.title)) return false;
-  if (!isOneOf(value.status, TASK_LEDGER_STATUSES)) return false;
-  if (value.parentGoalId !== void 0 && !isNullableString(value.parentGoalId)) return false;
-  const hasPairedProvenance = value.origin === "user" ? isString(value.userTaskId) && /^u[1-9]\d*$/.test(value.userTaskId) : (value.origin === void 0 || value.origin === "agent") && value.userTaskId === void 0;
-  return isOptionalString(value.description) && hasPairedProvenance;
-}
-function isTaskLedgerEvidence(value) {
-  if (!isRecord(value)) return false;
-  if (!isString(value.id) || !isString(value.description)) return false;
-  if (!isOneOf(value.status, TASK_LEDGER_EVIDENCE_STATUSES)) return false;
-  return isOptionalString(value.command) && isOptionalString(value.artifactPath) && isOptionalString(value.observedAt) && isOptionalString(value.notes);
-}
-function isDecisionRecord(value) {
-  if (!isRecord(value)) return false;
-  if (!isString(value.key) || !/^[a-z0-9]+(?:_[a-z0-9]+)*$/.test(value.key)) return false;
-  if (!isString(value.value) || !isOneOf(value.status, DECISION_STATUSES) || !isString(value.decidedAt)) return false;
-  if (!isOptionalString(value.label) || !isOptionalString(value.source_question)) return false;
-  if (!isOptionalString(value.revisedAt) || !isOptionalString(value.correction)) return false;
-  return value.status === "superseded" ? isString(value.revisedAt) : value.revisedAt === void 0 && value.correction === void 0;
-}
-function isOptionalCompactionUsage(value) {
-  if (value === void 0) return true;
-  if (!isRecord(value)) return false;
-  const cost = value.cost;
-  return isNumber(value.input) && isNumber(value.output) && isNumber(value.cacheRead) && isNumber(value.cacheWrite) && isNumber(value.reasoning) && isNumber(value.totalTokens) && isNumber(value.apiCalls) && isRecord(cost) && isNumber(cost.total);
-}
-function isProtectedArtifact(value) {
-  if (!isRecord(value)) return false;
-  return isString(value.path) && isString(value.protectedAt) && isString(value.reason) && isOneOf(value.source, PROTECTED_ARTIFACT_SOURCES) && isOptionalString(value.validationCommand) && isOptionalNumber(value.validationExitCode);
-}
-function isSessionHeader(value) {
-  if (!isRecord(value)) return false;
-  return value.type === "session" && isPositiveInteger(value.version) && isString(value.id) && isString(value.timestamp) && isString(value.cwd) && isOptionalString(value.parentSession) && isOptionalString(value.parentTurnId);
-}
-function isSessionEntry(value) {
-  if (!value || typeof value !== "object") return false;
-  const v = value;
-  if (!hasBaseSessionEntryFields(v)) return false;
-  if (!isOneOf(v.kind, SESSION_ENTRY_KINDS)) return false;
-  switch (v.kind) {
-    case "message":
-      return Object.hasOwn(v, "payload") && isOneOf(v.role, MESSAGE_ROLES);
-    case "bashExecution":
-      return isString(v.command) && isString(v.output) && (v.exitCode === null || isNumber(v.exitCode)) && typeof v.cancelled === "boolean" && typeof v.truncated === "boolean" && isOptionalString(v.fullOutputPath) && isOptionalBoolean(v.excludeFromContext);
-    case "custom":
-      return isString(v.customType) && isOptionalBoolean(v.display);
-    case "modelChange":
-      return isString(v.provider) && isString(v.modelId) && isOptionalString(v.target);
-    case "thinkingLevelChange":
-      return isString(v.thinkingLevel);
-    case "fileEntry":
-      return isString(v.path) && isOneOf(v.operation, FILE_OPERATIONS) && isOptionalNumber(v.bytes) && isOptionalString(v.hash);
-    case "branchSummary":
-      return isString(v.fromTurnId) && isString(v.summary);
-    case "compactionSummary":
-      return isString(v.summary) && isNumber(v.tokensBefore) && isString(v.firstKeptTurnId) && isOptionalCompactionUsage(v.usage) && (v.trigger === void 0 || isOneOf(v.trigger, COMPACTION_TRIGGERS)) && isOptionalNumber(v.tokensAfter) && isOptionalNumber(v.messagesSummarized) && isOptionalBoolean(v.isSplitTurn);
-    case "sessionInfo":
-      return isOptionalString(v.name) && isOptionalString(v.targetTurnId) && isOptionalString(v.label);
-    case "label":
-      return isString(v.targetTurnId) && isOptionalString(v.label);
-    case "protectedArtifact":
-      return v.action === "protect" && isProtectedArtifact(v.artifact) && isOptionalString(v.toolName) && isOptionalString(v.toolCallId) && isOptionalString(v.runId) && isOptionalString(v.correlationId);
-    case "skillActivation":
-      return isSkillActivation(v.activation);
-    case "taskLedger":
-      return isOptionalString(v.boardId) && Array.isArray(v.goals) && v.goals.every(isTaskLedgerGoal) && Array.isArray(v.subgoals) && v.subgoals.every(isTaskLedgerGoal) && isStringArray(v.activeRunIds) && Array.isArray(v.requiredValidationEvidence) && v.requiredValidationEvidence.every(isTaskLedgerEvidence);
-    case "decisionLedger":
-      return isString(v.interviewId) && isOneOf(v.interviewStatus, DECISION_INTERVIEW_STATUSES) && isString(v.startedAt) && isString(v.endedAt) && isNumber(v.roundCount) && Number.isInteger(v.roundCount) && v.roundCount >= 0 && isOptionalString(v.summary) && isOptionalString(v.transcriptPath) && Array.isArray(v.decisions) && v.decisions.every(isDecisionRecord);
-    case "workerRun":
-      return isString(v.assignmentId) && isString(v.runId) && isOneOf(v.origin, WORKER_RUN_ORIGINS) && isString(v.agentId) && isWorkerRunRuntime(v.runtime) && isOptionalString(v.parentToolCallId);
-  }
-  return false;
-}
-
-// src/domains/session/task-board.ts
-var TASK_BOARD_GOAL_ID = "board";
-var LEGACY_TASK_BOARD_ID = "legacy";
-function isOpenUserTask(task) {
-  return task.origin === "user" && (task.status === "pending" || task.status === "active");
-}
-function taskBoardCounts(board) {
-  const counts = {
-    total: board.tasks.length,
-    completed: 0,
-    active: 0,
-    pending: 0,
-    blocked: 0,
-    cancelled: 0,
-    open: 0
-  };
-  for (const task of board.tasks) {
-    if (task.status === "completed") counts.completed += 1;
-    else if (task.status === "active") counts.active += 1;
-    else if (task.status === "pending") counts.pending += 1;
-    else if (task.status === "blocked") counts.blocked += 1;
-    else counts.cancelled += 1;
-  }
-  counts.open = counts.pending + counts.active;
-  return counts;
-}
-function boardStatus(tasks) {
-  const counts = taskBoardCounts({ tasks });
-  if (counts.total === 0) return "pending";
-  if (counts.active > 0) return "active";
-  if (counts.open === 0 && counts.blocked === 0) return "completed";
-  if (counts.blocked > 0 && counts.open === 0) return "blocked";
-  return "pending";
-}
-function toTaskLedgerEntryFields(board, now) {
-  const evidence = [];
-  const subgoals = board.tasks.map((task) => {
-    if (task.status === "completed" && task.evidence) {
-      evidence.push({
-        id: `${task.id}.evidence`,
-        description: task.evidence,
-        status: "passed",
-        observedAt: now.toISOString()
-      });
-    }
-    const goal = {
-      id: task.id,
-      title: task.title,
-      status: task.status,
-      parentGoalId: TASK_BOARD_GOAL_ID
-    };
-    if (task.origin) goal.origin = task.origin;
-    if (task.userTaskId) goal.userTaskId = task.userTaskId;
-    if (task.reason) goal.description = task.reason;
-    return goal;
-  });
-  return {
-    kind: "taskLedger",
-    parentTurnId: null,
-    boardId: board.boardId,
-    goals: [{ id: TASK_BOARD_GOAL_ID, title: board.title, status: boardStatus(board.tasks) }],
-    subgoals,
-    activeRunIds: [...board.activeRunIds],
-    requiredValidationEvidence: evidence
-  };
-}
-function isTaskLedgerShaped(value) {
-  return isSessionEntry(value) && value.kind === "taskLedger";
-}
-function foldTaskBoard(entries) {
-  let last = null;
-  for (const raw of entries) {
-    if (isTaskLedgerShaped(raw)) last = toEntryView(raw);
-  }
-  return last;
-}
-function foldSessionTaskHistory(entries) {
-  const boards = /* @__PURE__ */ new Map();
-  for (const [index, raw] of entries.entries()) {
-    if (!isTaskLedgerShaped(raw)) continue;
-    const view = toEntryView(raw);
-    if (!view) continue;
-    const boardId = typeof raw.boardId === "string" && raw.boardId.length > 0 ? raw.boardId : LEGACY_TASK_BOARD_ID;
-    const timestamp = typeof raw.timestamp === "string" ? raw.timestamp : "";
-    if (boardId === LEGACY_TASK_BOARD_ID) {
-      boards.set(boardId, {
-        boardId,
-        title: view.title,
-        tasks: new Map(view.tasks.map((task) => [task.id, task])),
-        lastSnapshotAt: timestamp,
-        lastIndex: index
-      });
-      continue;
-    }
-    const existing = boards.get(boardId);
-    if (!existing) {
-      boards.set(boardId, {
-        boardId,
-        title: view.title,
-        tasks: new Map(view.tasks.map((task) => [task.id, task])),
-        lastSnapshotAt: timestamp,
-        lastIndex: index
-      });
-      continue;
-    }
-    existing.title = view.title;
-    for (const task of view.tasks) existing.tasks.set(task.id, task);
-    existing.lastSnapshotAt = timestamp;
-    existing.lastIndex = index;
-  }
-  return [...boards.values()].sort((left, right) => right.lastIndex - left.lastIndex).map(({ lastIndex: _lastIndex, tasks, ...board }) => ({ ...board, tasks: [...tasks.values()] }));
-}
-function toEntryView(entry) {
-  const boardGoal = entry.goals[0];
-  if (!boardGoal) return null;
-  const evidenceByTask = /* @__PURE__ */ new Map();
-  for (const item of entry.requiredValidationEvidence) {
-    const taskId = item.id.endsWith(".evidence") ? item.id.slice(0, -".evidence".length) : item.id;
-    evidenceByTask.set(taskId, item.description);
-  }
-  return {
-    boardId: entry.boardId ?? LEGACY_TASK_BOARD_ID,
-    title: boardGoal.title,
-    tasks: entry.subgoals.map((goal) => {
-      const task = {
-        id: goal.id,
-        title: goal.title,
-        status: goal.status,
-        origin: goal.origin ?? "agent"
-      };
-      if (goal.userTaskId) task.userTaskId = goal.userTaskId;
-      if (goal.description) task.reason = goal.description;
-      const evidence = evidenceByTask.get(goal.id);
-      if (evidence) task.evidence = evidence;
-      return task;
-    }),
-    // Run linkage is process-live: the runs recorded in old entries ended
-    // with the process that dispatched them, so a refold starts empty and
-    // the historical linkage stays readable in the earlier entries.
-    activeRunIds: []
-  };
-}
-function nextTaskId(tasks) {
-  let max = 0;
-  for (const task of tasks) {
-    const match = /^t(\d+)$/.exec(task.id);
-    if (match) max = Math.max(max, Number(match[1]));
-  }
-  return max + 1;
-}
-function normalizeTitles(titles) {
-  return titles.map((title) => title.trim()).filter((title) => title.length > 0);
-}
-function applyMutation(board, mutation) {
-  if (mutation.op === "plan") {
-    const titles = normalizeTitles(mutation.tasks);
-    if (mutation.title.trim().length === 0) return { error: "plan requires a non-empty title" };
-    if (titles.length === 0) return { error: "plan requires at least one task" };
-    const retained = board?.tasks.filter(isOpenUserTask) ?? [];
-    const notes2 = [];
-    const replacedOpen = board ? taskBoardCounts(board).open - retained.length : 0;
-    if (board && replacedOpen > 0) {
-      notes2.push(`replaced board "${board.title}" with ${replacedOpen} agent task(s) still open`);
-    }
-    if (retained.length > 0) notes2.push(`preserved ${retained.length} open operator task(s)`);
-    const start = nextTaskId(retained);
-    return {
-      board: {
-        boardId: "",
-        title: mutation.title.trim(),
-        tasks: [
-          ...retained,
-          ...titles.map((title, index) => ({
-            id: `t${start + index}`,
-            title,
-            status: "pending",
-            origin: "agent"
-          }))
-        ],
-        // Runs in flight outlive a board swap: they belong to the session,
-        // so the fresh board inherits the linkage until the runs finish.
-        activeRunIds: board?.activeRunIds ?? []
-      },
-      notes: notes2
-    };
-  }
-  if (mutation.op === "pick") {
-    const title = mutation.title.trim();
-    if (title.length === 0) return { error: "pick requires a non-empty operator task title" };
-    if (!/^u[1-9]\d*$/.test(mutation.userTaskId)) return { error: "pick requires an operator task id like u3" };
-    if (board?.tasks.some(
-      (task) => task.userTaskId === mutation.userTaskId && (task.status === "pending" || task.status === "active" || task.status === "completed")
-    )) {
-      return { error: `operator task ${mutation.userTaskId} is already linked to durable board work` };
-    }
-    const tasks2 = board?.tasks ?? [];
-    const picked = {
-      id: `t${nextTaskId(tasks2)}`,
-      title,
-      status: "pending",
-      origin: "user",
-      userTaskId: mutation.userTaskId
-    };
-    return {
-      board: {
-        boardId: board?.boardId ?? "",
-        title: board?.title ?? "Operator tasks",
-        tasks: [...tasks2, picked],
-        activeRunIds: board?.activeRunIds ?? []
-      },
-      notes: []
-    };
-  }
-  if (board === null) return { error: 'no task board yet; declare one with action="plan" first' };
-  if (mutation.op === "add") {
-    const titles = normalizeTitles(mutation.tasks);
-    if (titles.length === 0) return { error: "add requires at least one task" };
-    const start = nextTaskId(board.tasks);
-    const added = titles.map((title, index) => ({
-      id: `t${start + index}`,
-      title,
-      status: "pending",
-      origin: "agent"
-    }));
-    return { board: { ...board, tasks: [...board.tasks, ...added] }, notes: [] };
-  }
-  const target = board.tasks.find((task) => task.id === mutation.id);
-  if (!target) return { error: `task ${mutation.id} not found on the board` };
-  if (mutation.op === "block" && mutation.reason.trim().length === 0) {
-    return { error: "block requires a reason so the ledger records why work stopped" };
-  }
-  if (mutation.op === "done") {
-    if (mutation.evidence.trim().length === 0) {
-      return {
-        error: "done requires note as the evidence that the task actually finished (the command you ran, the file:line you verified). If the work did not happen, use block with a reason or drop it."
-      };
-    }
-    if (target.status === "pending") {
-      return {
-        error: `task ${target.id} was never started, so it cannot be completed. Start it and do the work, or record the truth with block (reason) or drop.`
-      };
-    }
-  }
-  const notes = [];
-  const tasks = board.tasks.map((task) => {
-    if (task.id !== target.id) {
-      if (mutation.op === "start" && task.status === "active") {
-        notes.push(`parked ${task.id} back to pending (one task active at a time)`);
-        return { ...task, status: "pending" };
-      }
-      return task;
-    }
-    return applyStatusMutation(task, mutation);
-  });
-  return { board: { ...board, tasks }, notes };
-}
-function applyStatusMutation(task, mutation) {
-  switch (mutation.op) {
-    case "start":
-      return { ...task, status: "active" };
-    case "done": {
-      const done = { ...task, status: "completed", evidence: mutation.evidence.trim() };
-      delete done.reason;
-      return done;
-    }
-    case "block":
-      return { ...task, status: "blocked", reason: mutation.reason.trim() };
-    case "drop": {
-      const dropped = { ...task, status: "cancelled" };
-      if (mutation.reason?.trim()) dropped.reason = mutation.reason.trim();
-      return dropped;
-    }
-  }
-}
-function createTaskBoardStore(deps = {}) {
-  let cachedSessionId;
-  let dirty = true;
-  let board = null;
-  const syncToSession = () => {
-    const sessionId = deps.getSessionId?.() ?? null;
-    if (!dirty && cachedSessionId === sessionId) return;
-    dirty = false;
-    cachedSessionId = sessionId;
-    try {
-      board = deps.readEntries ? foldTaskBoard(deps.readEntries()) : null;
-    } catch {
-      board = null;
-    }
-  };
-  const persist = (next) => {
-    try {
-      deps.appendEntry?.(toTaskLedgerEntryFields(next, deps.now?.() ?? /* @__PURE__ */ new Date()));
-    } catch {
-    }
-  };
-  const mutationRequiresAcknowledgement = (current, mutation) => {
-    if (mutation.op === "pick") return true;
-    if (mutation.op === "plan") return current?.tasks.some(isOpenUserTask) ?? false;
-    if (mutation.op !== "done") return false;
-    return current?.tasks.some((task) => task.id === mutation.id && task.origin === "user") ?? false;
-  };
-  return {
-    snapshot() {
-      syncToSession();
-      return board;
-    },
-    cachedSnapshot() {
-      const sessionId = deps.getSessionId?.() ?? null;
-      return !dirty && cachedSessionId === sessionId ? board : null;
-    },
-    historySnapshot() {
-      syncToSession();
-      try {
-        return deps.readEntries ? foldSessionTaskHistory(deps.readEntries()) : [];
-      } catch {
-        return [];
-      }
-    },
-    apply(mutation) {
-      syncToSession();
-      const result = applyMutation(board, mutation);
-      if ("error" in result) return { ok: false, message: result.error };
-      const needsBoardId = mutation.op === "plan" || result.board.boardId.length === 0;
-      const nextBoard = needsBoardId ? { ...result.board, boardId: deps.createBoardId?.() ?? randomUUID() } : result.board;
-      if (mutationRequiresAcknowledgement(board, mutation)) {
-        if (!deps.appendEntry) {
-          return { ok: false, message: "durable task-ledger persistence is unavailable for operator-linked work" };
-        }
-        try {
-          deps.appendEntry(toTaskLedgerEntryFields(nextBoard, deps.now?.() ?? /* @__PURE__ */ new Date()));
-        } catch (error) {
-          const message = error instanceof Error ? error.message : String(error);
-          return { ok: false, message: `could not persist operator-linked task board: ${message}` };
-        }
-        board = nextBoard;
-        return { ok: true, board: nextBoard, notes: result.notes };
-      }
-      board = nextBoard;
-      persist(nextBoard);
-      return { ok: true, board: nextBoard, notes: result.notes };
-    },
-    attachRun(runId) {
-      syncToSession();
-      if (board === null || runId.length === 0 || board.activeRunIds.includes(runId)) return;
-      board = { ...board, activeRunIds: [...board.activeRunIds, runId] };
-      persist(board);
-    },
-    detachRun(runId) {
-      syncToSession();
-      if (board === null || !board.activeRunIds.includes(runId)) return;
-      board = { ...board, activeRunIds: board.activeRunIds.filter((id) => id !== runId) };
-      persist(board);
-    },
-    invalidate() {
-      dirty = true;
-    }
-  };
-}
-
 // src/engine/antigravity/subprocess-runtime.ts
 init_esm_shims();
-import { spawn } from "node:child_process";
+import { spawn as spawn2 } from "node:child_process";
 
 // src/engine/external-subprocess.ts
 init_esm_shims();
@@ -1464,7 +1213,7 @@ async function readStdout(child, emit, state) {
 }
 function startAntigravityWorkerRun(input, emit) {
   const args = buildAgyArgs(input);
-  const child = spawn(ANTIGRAVITY_BINARY, args, {
+  const child = spawn2(ANTIGRAVITY_BINARY, args, {
     cwd: process.cwd(),
     env: process.env,
     stdio: ["ignore", "pipe", "pipe"]
@@ -1519,7 +1268,7 @@ function startAntigravityWorkerRun(input, emit) {
 
 // src/engine/claude/subprocess-runtime.ts
 init_esm_shims();
-import { spawn as spawn2 } from "node:child_process";
+import { spawn as spawn3 } from "node:child_process";
 import { createInterface } from "node:readline";
 
 // src/engine/claude/session-id.ts
@@ -1712,7 +1461,7 @@ async function readJsonLines(child, emit, state) {
 }
 function startClaudeCodeWorkerRun(input, emit) {
   const args = buildClaudeCodeArgs(input);
-  const child = spawn2("claude", args, {
+  const child = spawn3("claude", args, {
     cwd: process.cwd(),
     env: process.env,
     stdio: ["ignore", "pipe", "pipe"]
@@ -1778,6 +1527,271 @@ var WORKER_RUNTIME_MEDIATES_CLIO_DISPATCH = false;
 // src/tools/builtin-tool-catalog.ts
 init_esm_shims();
 
+// src/tools/bash.ts
+init_esm_shims();
+
+// src/tools/presentation.ts
+init_esm_shims();
+var FOLDED = { foldDefault: "folded", showDiffWhenFolded: false, failureExcerpt: true };
+var FOLDED_WITH_DIFF = {
+  foldDefault: "folded",
+  showDiffWhenFolded: true,
+  failureExcerpt: true
+};
+var TOOL_PRESENTATION = {
+  [ToolNames.Read]: FOLDED,
+  [ToolNames.Grep]: FOLDED,
+  [ToolNames.Find]: FOLDED,
+  [ToolNames.Ls]: FOLDED,
+  [ToolNames.CodeNav]: FOLDED,
+  [ToolNames.Context]: FOLDED,
+  [ToolNames.CredentialPresent]: FOLDED,
+  [ToolNames.Write]: FOLDED_WITH_DIFF,
+  [ToolNames.Edit]: FOLDED_WITH_DIFF,
+  [ToolNames.Bash]: FOLDED,
+  [ToolNames.Git]: FOLDED,
+  [ToolNames.Verify]: FOLDED,
+  [ToolNames.Dispatch]: FOLDED,
+  [ToolNames.Monitor]: FOLDED,
+  [ToolNames.Steer]: FOLDED,
+  [ToolNames.Tasks]: FOLDED,
+  [ToolNames.Ledger]: FOLDED,
+  [ToolNames.WebFetch]: FOLDED,
+  [ToolNames.AskUser]: FOLDED,
+  [ToolNames.Artifact]: FOLDED
+};
+function readStringField(args, key) {
+  if (typeof args !== "object" || args === null || Array.isArray(args)) return null;
+  const value = args[key];
+  return typeof value === "string" && value.length > 0 ? value : null;
+}
+function classifyResourceRead(toolName, args) {
+  if (toolName !== ToolNames.Read) return null;
+  const path3 = readStringField(args, "path");
+  if (path3 === null) return null;
+  const normalized = path3.replace(/\\/g, "/");
+  const base = normalized.split("/").pop() ?? "";
+  if (base === "SKILL.md") return "skill";
+  if (base === "CLIO-CODER.md") return "handbook";
+  if (base === "AGENTS.md") return "agents";
+  if (/(^|\/)docs\//.test(normalized)) return "docs";
+  return null;
+}
+function toolPresentationPolicy(toolName, args) {
+  if (classifyResourceRead(toolName, args) !== null) return FOLDED;
+  return TOOL_PRESENTATION[toolName] ?? FOLDED;
+}
+
+// src/tools/bash.ts
+var BASH_DISPLAY_MAX_BYTES = 16 * 1024;
+var BASH_OUTPUT_POLICIES = /* @__PURE__ */ new Set(["full", "bounded", "summary", "metadata-only"]);
+function bashContextDisposition(policy) {
+  if (policy === "full") {
+    return { mode: "full", maxBytes: BASH_DISPLAY_MAX_BYTES, downgradeExcerpt: "tail" };
+  }
+  if (policy === "summary") {
+    return {
+      mode: "summary",
+      maxBytes: BASH_DISPLAY_MAX_BYTES,
+      strategy: "diagnostic",
+      redact: true
+    };
+  }
+  if (policy === "metadata-only") return { mode: "metadata-only", maxBytes: BASH_DISPLAY_MAX_BYTES };
+  return { mode: "bounded", maxBytes: BASH_DISPLAY_MAX_BYTES, excerpt: "tail" };
+}
+var BASH_DEFAULT_RESULT_DISPOSITION = {
+  presentation: {
+    ...toolPresentationPolicy(ToolNames.Bash, void 0),
+    maxBytes: BASH_DISPLAY_MAX_BYTES,
+    overflow: "tail"
+  },
+  context: bashContextDisposition("bounded")
+};
+function normalizeBashArguments(args) {
+  return args.output_policy === void 0 ? { ...args, output_policy: "bounded" } : args;
+}
+function bashOutputPolicy(args) {
+  const value = args.output_policy;
+  return typeof value === "string" && BASH_OUTPUT_POLICIES.has(value) ? value : null;
+}
+function resolveBashResultDisposition(args, declared = BASH_DEFAULT_RESULT_DISPOSITION) {
+  const policy = bashOutputPolicy(args) ?? "bounded";
+  const base = declared ?? BASH_DEFAULT_RESULT_DISPOSITION;
+  return { presentation: base.presentation, context: bashContextDisposition(policy) };
+}
+function normalizedBashDisposition(policy) {
+  return {
+    presentation: { ...BASH_DEFAULT_RESULT_DISPOSITION.presentation, maxBytes: BASH_DISPLAY_MAX_BYTES },
+    context: bashContextDisposition(policy)
+  };
+}
+function shapeBashProgress(rawOutput, outputBytes, policy) {
+  const disposition = normalizedBashDisposition(policy);
+  let output;
+  if (policy === "metadata-only") {
+    output = `bash: running; captured ${outputBytes} bytes; stdout/stderr omitted by metadata-only policy`;
+  } else if (policy === "summary") {
+    output = deterministicDiagnosticSummary(rawOutput, BASH_DISPLAY_MAX_BYTES, true).text;
+  } else {
+    output = truncateTail(rawOutput, {
+      maxLines: DEFAULT_MAX_LINES,
+      maxBytes: disposition.context.maxBytes
+    }).content;
+  }
+  return {
+    kind: "ok",
+    output,
+    details: {
+      resultSize: {
+        bytes: outputBytes,
+        shownBytes: byteLength(output),
+        maxBytes: BASH_DISPLAY_MAX_BYTES,
+        truncated: byteLength(rawOutput) > byteLength(output),
+        policy
+      }
+    }
+  };
+}
+function bashResultDetails(result, rawOutput, outcome) {
+  return {
+    outcome,
+    exitCode: result.exitCode,
+    signal: result.signal,
+    timedOut: result.timedOut,
+    aborted: result.aborted,
+    outputCapped: result.outputCapped,
+    outputBytes: result.outputBytes,
+    retainedBytes: byteLength(rawOutput),
+    stdoutBytes: byteLength(result.stdout),
+    stderrBytes: byteLength(result.stderr)
+  };
+}
+var OBSERVE_COMMAND_PATTERN = /^\s*(?:cat|head|tail|ls|grep|rg|find)\b/;
+var OBSERVE_NUDGE_SESSION_LIMIT = 64;
+var observeNudgeSeenSessions = /* @__PURE__ */ new Set();
+function observeToolsNudge(command, sessionId) {
+  if (!OBSERVE_COMMAND_PATTERN.test(command)) return "";
+  const key = sessionId ?? "no-session";
+  if (observeNudgeSeenSessions.has(key)) return "";
+  if (observeNudgeSeenSessions.size >= OBSERVE_NUDGE_SESSION_LIMIT) {
+    const oldest = observeNudgeSeenSessions.values().next().value;
+    if (oldest !== void 0) observeNudgeSeenSessions.delete(oldest);
+  }
+  observeNudgeSeenSessions.add(key);
+  return "\n\n[note: prefer the structured observe tools over shell file inspection: read pages files with offset/limit, ls lists directories, grep and find search, code_nav maps symbols. Their results are capped and continuable; keep bash for builds, git, and scripts.]";
+}
+var bashTool = {
+  name: ToolNames.Bash,
+  description: "Execute a bash command inside the session workspace. output_policy controls model context: bounded keeps the diagnostic tail and is the default; summary keeps deterministic redacted diagnostics; metadata-only keeps facts and retrieval; full is admitted only within the result budget.",
+  parameters: typebox_exports.Object({
+    command: typebox_exports.String({ description: "Bash command to execute." }),
+    cwd: typebox_exports.Optional(
+      typebox_exports.String({
+        description: "Omit this. The command already runs at the session workspace root. Set it only to run in a subdirectory of that root, as a relative path; an absolute path outside the root is blocked."
+      })
+    ),
+    timeout_ms: typebox_exports.Optional(typebox_exports.Number({ description: "Timeout in milliseconds." })),
+    output_policy: typebox_exports.Optional(
+      typebox_exports.Union([typebox_exports.Literal("full"), typebox_exports.Literal("bounded"), typebox_exports.Literal("summary"), typebox_exports.Literal("metadata-only")], {
+        description: "Model-context disposition. Omit for bounded tail output. Use summary for noisy runs, metadata-only when only status and retrieval matter, and full only for known-small output."
+      })
+    )
+  }),
+  baseActionClass: "execute",
+  executionMode: "sequential",
+  prepareArguments: normalizeBashArguments,
+  resolveResultDisposition: resolveBashResultDisposition,
+  async run(args, options) {
+    args = normalizeBashArguments(args);
+    if (typeof args.command !== "string" || args.command.length === 0) {
+      return { kind: "error", message: "bash: missing command argument" };
+    }
+    const outputPolicy = bashOutputPolicy(args);
+    if (outputPolicy === null) {
+      return {
+        kind: "error",
+        message: "bash: output_policy must be one of full, bounded, summary, or metadata-only (omit it for bounded)",
+        details: { outcome: "invalid-arguments", exitCode: null }
+      };
+    }
+    const cwdArg = typeof args.cwd === "string" && args.cwd.length > 0 ? args.cwd : void 0;
+    let cwd;
+    try {
+      cwd = resolveSafeCwd(cwdArg === void 0 ? void 0 : expandPath(cwdArg), process.cwd());
+    } catch {
+      return {
+        kind: "error",
+        message: `bash: cwd '${cwdArg}' escapes workspace root '${process.cwd()}'; use a typed tool or a project policy entry with explicit cwd`
+      };
+    }
+    const timeout = typeof args.timeout_ms === "number" && args.timeout_ms > 0 ? args.timeout_ms : 3e5;
+    try {
+      const runOptions = {
+        cwd,
+        timeoutMs: timeout,
+        ...options?.signal === void 0 ? {} : { signal: options.signal }
+      };
+      if (options?.onUpdate !== void 0) {
+        runOptions.onUpdate = (progress) => {
+          options.onUpdate?.(shapeBashProgress(combineBashOutput(progress), progress.outputBytes, outputPolicy));
+        };
+      }
+      const result = await runBashCommand(args.command, runOptions);
+      const { error, aborted, timedOut, outputCapped } = result;
+      const rawOutput = combineBashOutput(result);
+      const output = rawOutput.trim();
+      if (aborted) {
+        const status = "bash: command aborted";
+        return {
+          kind: "error",
+          message: output.length > 0 ? `${output}
+
+${status}` : status,
+          details: bashResultDetails(result, rawOutput, "abort")
+        };
+      }
+      if (timedOut) {
+        const status = `bash: command timed out after ${timeout}ms`;
+        return {
+          kind: "error",
+          message: output.length > 0 ? `${output}
+
+${status}` : status,
+          details: bashResultDetails(result, rawOutput, "timeout")
+        };
+      }
+      if (outputCapped) {
+        const status = `bash: command output exceeded ${BASH_HARD_CAP_BYTES} bytes and was stopped`;
+        return {
+          kind: "error",
+          message: output.length > 0 ? `${output}
+
+${status}` : status,
+          details: bashResultDetails(result, rawOutput, "output-cap")
+        };
+      }
+      if (error) {
+        const code = typeof error.code === "number" ? error.code : error.code;
+        const status = `bash: command failed (exit ${code ?? "?"})`;
+        const message = output.length > 0 ? `${output}
+
+${status}` : `${status}: ${error.message}`;
+        return { kind: "error", message, details: bashResultDetails(result, rawOutput, "nonzero") };
+      }
+      const body = rawOutput.length > 0 ? rawOutput : "(no output)";
+      return {
+        kind: "ok",
+        output: `${body}${observeToolsNudge(args.command, options?.sessionId)}`,
+        details: bashResultDetails(result, rawOutput, "success")
+      };
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      return { kind: "error", message: `bash: ${msg}` };
+    }
+  }
+};
+
 // src/tools/read.ts
 init_esm_shims();
 import { readFileSync, statSync } from "node:fs";
@@ -1979,7 +1993,7 @@ var TOOL_METADATA = {
       "Use a narrower query or scope to inspect omitted content."
     ),
     costLatency: "local_fast",
-    promptHint: 'Call context with scope="skills" to list installed and marketplace skills; when one matches the task, or the operator names a skill or asks how one works, suggest the operator run /skill <name> (a marketplace skill is offered for install) and never load it uninvited. When the user message carries a skill request, first load that skill via context (scope="skills", name=<skill>) before doing anything else.'
+    promptHint: 'Call context with scope="skills" to list installed and marketplace skills; when one matches the task, or the operator names a skill or asks how one works, suggest the operator run /skill <name> (a marketplace skill is offered for install) and never load it uninvited. When the user message carries a skill request, first load that skill via context (scope="skills", name=<skill>) before doing anything else. When an [evicted ...] marker names content you need, recall it with context(scope="recall", ref=...); re-read the file only when the marker says it changed.'
   },
   [ToolNames.CredentialPresent]: {
     objective: "Check whether a credential key is present without returning its value.",
@@ -2007,15 +2021,18 @@ var TOOL_METADATA = {
     resultSizePolicy: exactMutationPolicy,
     costLatency: "local_fast"
   },
-  // EXECUTE: the safe-exec spine (bash offloads its own overflow).
+  // EXECUTE: the safe-exec spine (canonical shaping offloads Bash overflow).
   [ToolNames.Bash]: {
     objective: "Execute an explicit shell command when narrower tools are insufficient.",
     uiLabel: "Shell",
     retrySafety: "unknown",
-    resultSizePolicy: summaryPolicy(
-      "Use a narrower command or a dedicated verification/read/search tool to inspect omitted output."
-    ),
-    costLatency: "local_slow"
+    resultSizePolicy: {
+      ...summaryPolicy("Use a narrower command or a dedicated verification/read/search tool to inspect omitted output."),
+      offloadMaxBytes: BASH_HARD_CAP_BYTES
+    },
+    resultDisposition: BASH_DEFAULT_RESULT_DISPOSITION,
+    costLatency: "local_slow",
+    promptHint: "Bash output_policy defaults to bounded diagnostic tail. Use summary for noisy commands, metadata-only when only outcome and retrieval matter, and full only when output is known to fit the bounded result budget."
   },
   [ToolNames.Git]: {
     objective: "Read-only git inspection: status, diff, or log.",
@@ -2136,7 +2153,7 @@ function toolPromptHintsForNames(names) {
 }
 function withBuiltinMetadata(spec) {
   const metadata = TOOL_METADATA[spec.name];
-  return metadata ? withMetadata(spec, metadata) : spec;
+  return metadata ? withMetadata(spec, { ...metadata, presentation: toolPresentationPolicy(spec.name, void 0) }) : spec;
 }
 function builtin(spec, sourceInfo) {
   return withBuiltinMetadata(withSourceInfo(spec, sourceInfo));
@@ -2924,7 +2941,7 @@ function isValidLineage(value) {
 // src/engine/claude/tool-safety.ts
 init_esm_shims();
 import { performance } from "node:perf_hooks";
-function isRecord2(value) {
+function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function stringField(record2, ...keys) {
@@ -3190,7 +3207,7 @@ function emitClaudeToolPermissionDecision(input) {
   return decision;
 }
 function coerceToolInput(value) {
-  return isRecord2(value) ? value : {};
+  return isRecord(value) ? value : {};
 }
 
 // src/domains/dispatch/agent-candidates.ts
@@ -3381,6 +3398,11 @@ export {
   emitClaudeToolPermissionDecision,
   coerceToolInput,
   WORKER_RUNTIME_MEDIATES_CLIO_DISPATCH,
+  combineBashOutput,
+  runBashCommand,
+  classifyResourceRead,
+  toolPresentationPolicy,
+  bashTool,
   readMaxBytes,
   readTool,
   toolPromptHintsForNames,
@@ -3418,11 +3440,6 @@ export {
   runKindSupportsLiveSteering,
   projectExecutionHandoffs,
   DISPATCH_BRIEFING_MAX_BYTES,
-  validateJobSpec,
-  isSessionHeader,
-  isSessionEntry,
-  taskBoardCounts,
-  foldSessionTaskHistory,
-  createTaskBoardStore
+  validateJobSpec
 };
-//# sourceMappingURL=chunk-MQSRRFWA.js.map
+//# sourceMappingURL=chunk-ZYKPLLNQ.js.map