@iowarp/clio-coder 0.3.8 → 0.3.9

package/dist/{chunk-TLQJPP24.js → chunk-TEO2TLVN.js}

@@ -1,18 +1,12 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
-import {
-  protectedArtifactFromSessionEntry,
-  protectedArtifactStateFromSessionEntries,
-  readAuditRows,
-  readSessionEntriesForId,
-  responseModelIdObservationFromRecord
-} from "./chunk-YS5VLNH5.js";
 import {
   RUN_RECEIPT_INTEGRITY_ALGORITHM,
   RUN_RECEIPT_INTEGRITY_VERSION,
-  adaptFinishContractCompletionStatus,
   adaptGateDecisionReviewStatus,
   adaptGroundedEvidenceValidationStatus,
   composeTrustStatus,
+  formatTrustAxes,
+  formatTrustSummary,
   inspectRunReceiptTrustStatus,
   isReceiptIntegrity,
   isTrustStatusIdentifier,
@@ -21,10 +15,19 @@ import {
   parseEvalArtifactV4,
   redactArtifactForStorage,
   retiredIntegrityVersionOf,
+  sha256,
   sumEvalHarnessMetrics,
+  trustVerdict,
   verifyReceiptIntegrity,
   withReceiptIntegrity
-} from "./chunk-K4XHGFR5.js";
+} from "./chunk-MLOK6ZOS.js";
+import {
+  protectedArtifactFromSessionEntry,
+  protectedArtifactStateFromSessionEntries,
+  readAuditRows,
+  readSessionEntriesForId,
+  responseModelIdObservationFromRecord
+} from "./chunk-LXPJXFM5.js";
 import {
   applyTaskWorktree,
   captureWorkspaceSnapshot,
@@ -32,11 +35,11 @@ import {
   createTaskWorktree,
   createWriteBoundaryEnforcer,
   gitCheckoutRoot
-} from "./chunk-MXKJU4JB.js";
+} from "./chunk-ECUO3KDP.js";
 import {
   executionPlanAncestors,
   spliceExecutionPlan
-} from "./chunk-J3YUBZWY.js";
+} from "./chunk-HKO36JWF.js";
 import {
   parseRigorOverride,
   resolveRigor
@@ -44,7 +47,7 @@ import {
 import {
   FLEET_COMMAND_BASE_ENV,
   normalizeWriteBoundary
-} from "./chunk-E77JEWSD.js";
+} from "./chunk-HPCTNZM2.js";
 import {
   LOCAL_NODE_ID,
   computeSettingsFingerprint,
@@ -55,7 +58,7 @@ import {
   receiptAttestationFields,
   routeFactVerdict,
   spawnNativeWorker
-} from "./chunk-2HEJ2F35.js";
+} from "./chunk-5HFBWUMU.js";
 import {
   AGENT_LEDGER_PROMPT_MAX_CHARS,
   RETRYABLE_OUTCOMES,
@@ -95,7 +98,7 @@ import {
   serializeWorkerRuntimeDescriptor,
   toolPromptHintsForNames,
   validateJobSpec
-} from "./chunk-A3WNZD3P.js";
+} from "./chunk-4H6ULJ3H.js";
 import {
   decideRoute,
   defaultRoutingIntent,
@@ -113,7 +116,7 @@ import {
   routingIntentRejection,
   sameRouteIdentity,
   toRouteCandidate
-} from "./chunk-P43ETTHK.js";
+} from "./chunk-VPTUJU4P.js";
 import {
   appliesRecipeResultContract,
   gateRouteCorrelation,
@@ -123,38 +126,36 @@ import {
   withAttemptRole
 } from "./chunk-H7IXIC72.js";
 import {
-  WRITE_ROOT_REFUSED_TOOLS,
   assessFinishContract
-} from "./chunk-5H3GB5BO.js";
+} from "./chunk-7C6RYZGQ.js";
+import {
+  WRITE_ROOT_REFUSED_TOOLS
+} from "./chunk-N3PBVRTZ.js";
 import {
   compareCodepoints
 } from "./chunk-A2NJGIB3.js";
-import {
-  isSkillActivation
-} from "./chunk-GOXNB3AO.js";
-import {
-  DEFAULT_AUTONOMY_LEVEL,
-  autonomyDenyRejection,
-  mapAutonomy
-} from "./chunk-HWUFFB6L.js";
-import {
-  parseJsonObjectPayload,
-  parseVerifierResult,
-  pathBoundaryCovers,
-  resultContractAuthorship,
-  validateRecipeResult
-} from "./chunk-TTHACPOM.js";
 import {
   agentSpecFingerprint,
   assertAgentSpecPolicy,
   classify,
   isUserVisibleAgent,
   normalizeAgentSpec,
-  resolveAgentToolCompatibility
-} from "./chunk-AOCYTWAV.js";
+  parseJsonObjectPayload,
+  parseVerifierResult,
+  pathBoundaryCovers,
+  resolveAgentToolCompatibility,
+  resultContractAuthorship,
+  validateRecipeResult
+} from "./chunk-S4COXYBG.js";
 import {
   detectValidationCommand
 } from "./chunk-MV3K5QF2.js";
+import {
+  DEFAULT_AUTONOMY_LEVEL,
+  autonomyDenyRejection,
+  isSkillActivation,
+  mapAutonomy
+} from "./chunk-RAPCMZL4.js";
 import {
   isProjectVerifierCheckId,
   isVerificationScriptName
@@ -181,16 +182,20 @@ import {
 } from "./chunk-CGKSTWHD.js";
 import {
   canonicalizeWireModelId,
+  endpointCapacitiesForStatuses,
+  endpointCapacityForStatus,
+  endpointLabel,
   firstRuntimeResolutionError,
+  foregroundStreamUsage,
   isDispatchEligibleRuntime,
   resolveModelCapabilities,
   resolveRuntimeTarget,
   runtimeResolutionWarnings,
   runtimeTargetSnapshot
-} from "./chunk-7RFXX52T.js";
+} from "./chunk-MIX5N5AC.js";
 import {
   ceilChars
-} from "./chunk-RWSI4YD7.js";
+} from "./chunk-AEYBF3TB.js";
 import {
   attributeCommitMessage,
   gitCommitAttributionEnabled,
@@ -203,13 +208,11 @@ import {
 } from "./chunk-FQ4SKYE4.js";
 import {
   BusChannels
-} from "./chunk-TT36MB5S.js";
+} from "./chunk-RKRLDWD3.js";
 import {
+  assertSafeId,
   atomicWrite
-} from "./chunk-3BINW3FP.js";
-import {
-  assertSafeId
-} from "./chunk-R346GLFC.js";
+} from "./chunk-KV2AOLDF.js";
 import {
   AI_AGENT_NAME
 } from "./chunk-6EJMN2Y3.js";
@@ -223,7 +226,7 @@ import {
   DEFAULT_DELEGATION_TURN_TIMEOUT_MS,
   DEFAULT_SETTINGS,
   THINKING_LEVELS
-} from "./chunk-4DGYLA73.js";
+} from "./chunk-XDOQXGFO.js";
 import {
   GUARDRAIL_DEFAULTS,
   resolveGuardrail
@@ -248,7 +251,7 @@ import {
 } from "./chunk-BNAZZHFG.js";
 import {
   resolveEffectivePricing
-} from "./chunk-PT7HYKEM.js";
+} from "./chunk-VO2LKSTM.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -1069,7 +1072,7 @@ function clone(lease) {
 function valid(value) {
   if (typeof value !== "object" || value === null) return false;
   const lease = value;
-  return typeof lease.leaseId === "string" && typeof lease.assignmentId === "string" && typeof lease.nodeId === "string" && (lease.host === void 0 || typeof lease.host === "string") && Number.isInteger(lease.ownerPid) && typeof lease.processBirthToken === "string" && typeof lease.acquiredAt === "string" && typeof lease.expiresAt === "string" && typeof lease.heartbeatAt === "string" && (lease.reservationOwnerId === null || typeof lease.reservationOwnerId === "string") && (lease.reservationMemberId === null || typeof lease.reservationMemberId === "string");
+  return typeof lease.leaseId === "string" && typeof lease.assignmentId === "string" && typeof lease.nodeId === "string" && (lease.endpointKey === void 0 || typeof lease.endpointKey === "string") && (lease.host === void 0 || typeof lease.host === "string") && Number.isInteger(lease.ownerPid) && typeof lease.processBirthToken === "string" && typeof lease.acquiredAt === "string" && typeof lease.expiresAt === "string" && typeof lease.heartbeatAt === "string" && (lease.reservationOwnerId === null || typeof lease.reservationOwnerId === "string") && (lease.reservationMemberId === null || typeof lease.reservationMemberId === "string");
 }
 function validTimestamp(value) {
   if (typeof value !== "string") return false;
@@ -1133,6 +1136,7 @@ var MEMBER_STATUSES = /* @__PURE__ */ new Set(["held", "consumed", "released"]);
 function heldReservationUsage(values) {
   let global = 0;
   const nodes = {};
+  const endpoints = {};
   for (const value of values) {
     if (typeof value !== "object" || value === null)
       throw new Error("dispatch capacity store has invalid reservation records");
@@ -1142,6 +1146,7 @@ function heldReservationUsage(values) {
     if (record.status !== "active") continue;
     const byWave = /* @__PURE__ */ new Map();
     const byNodeWave = /* @__PURE__ */ new Map();
+    const byEndpointWave = /* @__PURE__ */ new Map();
     for (const raw of record.members) {
       if (typeof raw !== "object" || raw === null)
         throw new Error("dispatch capacity store has invalid reservation records");
@@ -1154,13 +1159,34 @@ function heldReservationUsage(values) {
       const nodeWaves = byNodeWave.get(member.nodeId) ?? /* @__PURE__ */ new Map();
       nodeWaves.set(wave, (nodeWaves.get(wave) ?? 0) + 1);
       byNodeWave.set(member.nodeId, nodeWaves);
+      if (member.endpointKey !== void 0 && typeof member.endpointKey !== "string")
+        throw new Error("dispatch capacity store has invalid reservation records");
+      if (typeof member.endpointKey === "string") {
+        const endpointWaves = byEndpointWave.get(member.endpointKey) ?? /* @__PURE__ */ new Map();
+        endpointWaves.set(wave, (endpointWaves.get(wave) ?? 0) + 1);
+        byEndpointWave.set(member.endpointKey, endpointWaves);
+      }
     }
     global += Math.max(0, ...byWave.values());
     for (const [id, waves] of byNodeWave) nodes[id] = (nodes[id] ?? 0) + Math.max(0, ...waves.values());
+    for (const [key, waves] of byEndpointWave) endpoints[key] = (endpoints[key] ?? 0) + Math.max(0, ...waves.values());
   }
-  return { global, nodes };
+  return { global, nodes, endpoints };
 }
-function assertCapacity(file, nodeId, limits) {
+function describeEndpointCapacityHolders(holders) {
+  const parts = [];
+  const add = (count, singular, plural) => {
+    if (count > 0) parts.push(`${count} ${count === 1 ? singular : plural}`);
+  };
+  add(holders.leases, "active lease", "active leases");
+  add(holders.reservations, "held reservation", "held reservations");
+  add(holders.foregroundStreams, "foreground stream", "foreground streams");
+  if (parts.length === 0) return "no active lease, held reservation, or foreground stream currently holds a slot";
+  const named = parts.length === 1 ? parts[0] : parts.length === 2 ? `${parts[0]} and ${parts[1]}` : `${parts.slice(0, -1).join(", ")}, and ${parts.at(-1)}`;
+  const total = holders.leases + holders.reservations + holders.foregroundStreams;
+  return `${named} ${total === 1 ? "holds" : "hold"} ${total === 1 ? "the slot" : "the slots"}`;
+}
+function assertCapacity(file, nodeId, endpointKey, limits) {
   const held2 = heldReservationUsage(file.reservations);
   const globalUsed = file.leases.length + held2.global;
   if (globalUsed >= limits.global) {
@@ -1175,6 +1201,23 @@ function assertCapacity(file, nodeId, limits) {
     if (used >= nodeLimit)
       throw new Error(`dispatch: admission denied: node '${nodeId}' capacity reached (${used}/${nodeLimit})`);
   }
+  if (endpointKey !== void 0) {
+    const endpointLimit = limits.endpoints[endpointKey];
+    if (endpointLimit !== void 0) {
+      if (endpointLimit < 1)
+        throw new Error(`dispatch: admission denied: endpoint '${endpointLabel(endpointKey)}' capacity unavailable`);
+      const holders = {
+        leases: file.leases.filter((lease) => lease.endpointKey === endpointKey).length,
+        reservations: held2.endpoints[endpointKey] ?? 0,
+        foregroundStreams: foregroundStreamUsage()[endpointKey] ?? 0
+      };
+      const used = holders.leases + holders.reservations + holders.foregroundStreams;
+      if (used >= endpointLimit)
+        throw new Error(
+          `dispatch: admission denied: endpoint '${endpointLabel(endpointKey)}' capacity reached (${used}/${endpointLimit} slots): ${describeEndpointCapacityHolders(holders)}; collect in-flight runs or point workers at a second server`
+        );
+    }
+  }
 }
 function acquireCapacityLease(input) {
   return withStateFileLockSync(capacityStateLockPath(), () => {
@@ -1188,10 +1231,12 @@ function acquireCapacityLease(input) {
       );
     const existing = file.leases.find((lease2) => lease2.assignmentId === input.assignmentId);
     if (existing) {
-      if (existing.nodeId !== input.nodeId) {
+      if (existing.nodeId !== input.nodeId || existing.endpointKey !== input.endpointKey) {
         const without = { ...file, leases: file.leases.filter((lease2) => lease2 !== existing) };
-        assertCapacity(without, input.nodeId, input.limits);
+        assertCapacity(without, input.nodeId, input.endpointKey, input.limits);
         existing.nodeId = input.nodeId;
+        if (input.endpointKey === void 0) delete existing.endpointKey;
+        else existing.endpointKey = input.endpointKey;
       }
       existing.heartbeatAt = new Date(nowMs).toISOString();
       existing.expiresAt = new Date(nowMs + (input.ttlMs ?? DEFAULT_CAPACITY_LEASE_TTL_MS)).toISOString();
@@ -1199,7 +1244,7 @@ function acquireCapacityLease(input) {
       return clone(existing);
     }
     input.onAcquiredUnderLock?.(file);
-    assertCapacity(file, input.nodeId, input.limits);
+    assertCapacity(file, input.nodeId, input.endpointKey, input.limits);
     const token = input.processBirthToken ?? processBirthToken(input.ownerPid ?? process.pid);
     if (!token) throw new Error("dispatch: cannot establish process birth token");
     const at = new Date(nowMs).toISOString();
@@ -1207,6 +1252,7 @@ function acquireCapacityLease(input) {
       leaseId: `lease-${nowMs.toString(36)}-${randomBytes(6).toString("hex")}`,
       assignmentId: input.assignmentId,
       nodeId: input.nodeId,
+      ...input.endpointKey !== void 0 ? { endpointKey: input.endpointKey } : {},
       host: hostname(),
       ownerPid: input.ownerPid ?? process.pid,
       processBirthToken: token,
@@ -1278,8 +1324,23 @@ function capacityDrain(nowMs = Date.now()) {
 function capacityLeaseUsage(options) {
   const leases = listCapacityLeases(options);
   const nodes = {};
-  for (const lease of leases) nodes[lease.nodeId] = (nodes[lease.nodeId] ?? 0) + 1;
-  return { global: leases.length, nodes };
+  const foreground = foregroundStreamUsage();
+  const endpoints = { ...foreground };
+  const endpointHolders = Object.fromEntries(
+    Object.entries(foreground).map(([endpointKey, foregroundStreams]) => [
+      endpointKey,
+      { leases: 0, reservations: 0, foregroundStreams }
+    ])
+  );
+  for (const lease of leases) {
+    nodes[lease.nodeId] = (nodes[lease.nodeId] ?? 0) + 1;
+    if (lease.endpointKey !== void 0) {
+      endpoints[lease.endpointKey] = (endpoints[lease.endpointKey] ?? 0) + 1;
+      const holders = endpointHolders[lease.endpointKey] ?? { leases: 0, reservations: 0, foregroundStreams: 0 };
+      endpointHolders[lease.endpointKey] = { ...holders, leases: holders.leases + 1 };
+    }
+  }
+  return { global: leases.length, nodes, endpoints, endpointHolders };
 }
 function createNodeLeaseUsageReader(options) {
   const cacheMs = options.cacheMs ?? 200;
@@ -1487,7 +1548,7 @@ function renderDispatchReviewerTask(originalTask, builderRunId, cycle, intent) {
 
 // src/domains/dispatch/receipt-findings.ts
 init_esm_shims();
-import { createHash as createHash12 } from "node:crypto";
+import { createHash as createHash11 } from "node:crypto";
 
 // src/domains/evidence/index.ts
 init_esm_shims();
@@ -1502,12 +1563,14 @@ init_esm_shims();
 
 // src/domains/dispatch/extension.ts
 init_esm_shims();
-import { createHash as createHash9, randomBytes as randomBytes6 } from "node:crypto";
+import { createHash as createHash8, randomBytes as randomBytes6 } from "node:crypto";
 import { existsSync as existsSync12, readdirSync as readdirSync4, readFileSync as readFileSync12 } from "node:fs";
 import { isAbsolute as isAbsolute2, relative, resolve as resolvePath, sep } from "node:path";
+import { performance as performance5 } from "node:perf_hooks";
 
 // src/engine/acp/adapter.ts
 init_esm_shims();
+import { performance as performance4 } from "node:perf_hooks";
 
 // src/engine/acp/event-mapper.ts
 init_esm_shims();
@@ -2276,7 +2339,14 @@ function errorEvents(messageText2) {
 function startAcpDelegationRun(input) {
   const connectTimeoutMs = input.agent.connectTimeoutMs ?? DEFAULT_DELEGATION_CONNECT_TIMEOUT_MS;
   const turnTimeoutMs = input.agent.turnTimeoutMs ?? DEFAULT_DELEGATION_TURN_TIMEOUT_MS;
-  const heartbeatAt = { current: Date.now() };
+  const now = input.now ?? Date.now;
+  const monotonicNow = input.monotonicNow ?? (() => performance4.now());
+  const heartbeatWallAnchor = now();
+  const heartbeatMonotonicAnchor = monotonicNow();
+  const heartbeatAt = {
+    current: heartbeatWallAnchor,
+    monotonic: heartbeatMonotonicAnchor
+  };
   const queue = new AsyncEventQueue();
   const usage = emptyUsage();
   const mapper = new AcpEventMapper();
@@ -2303,7 +2373,9 @@ function startAcpDelegationRun(input) {
     cancelTimer = null;
   };
   const emit = (event) => {
-    heartbeatAt.current = Date.now();
+    const stamp = monotonicNow();
+    heartbeatAt.monotonic = stamp;
+    heartbeatAt.current = heartbeatWallAnchor + (stamp - heartbeatMonotonicAnchor);
     queue.push(event);
   };
   const mediator = new AcpToolMediator({
@@ -2478,62 +2550,6 @@ function startAcpDelegationRun(input) {
 // src/domains/prompts/compiler.ts
 init_esm_shims();
 import { join as join3 } from "node:path";
-
-// src/domains/prompts/hash.ts
-init_esm_shims();
-import { createHash as createHash2 } from "node:crypto";
-function sha256(input) {
-  return createHash2("sha256").update(input, "utf8").digest("hex");
-}
-function canonicalJson2(value) {
-  return serialize(value);
-}
-function serialize(value) {
-  if (value === null) return "null";
-  if (typeof value === "number") {
-    if (!Number.isFinite(value)) {
-      throw new Error(`canonicalJson: non-finite number ${String(value)} is not representable`);
-    }
-    return JSON.stringify(value);
-  }
-  if (typeof value === "string" || typeof value === "boolean") {
-    return JSON.stringify(value);
-  }
-  if (typeof value === "bigint") {
-    throw new Error("canonicalJson: bigint is not representable");
-  }
-  if (typeof value === "symbol" || typeof value === "function") {
-    throw new Error(`canonicalJson: ${typeof value} is not representable`);
-  }
-  if (value === void 0) {
-    throw new Error("canonicalJson: undefined is not representable at root");
-  }
-  if (Array.isArray(value)) {
-    const parts = [];
-    for (let i = 0; i < value.length; i++) {
-      if (!(i in value) || value[i] === void 0) {
-        parts.push("null");
-        continue;
-      }
-      parts.push(serialize(value[i]));
-    }
-    return `[${parts.join(",")}]`;
-  }
-  if (typeof value === "object") {
-    const obj = value;
-    const keys = Object.keys(obj).sort();
-    const parts = [];
-    for (const key of keys) {
-      const child = obj[key];
-      if (child === void 0) continue;
-      parts.push(`${JSON.stringify(key)}:${serialize(child)}`);
-    }
-    return `{${parts.join(",")}}`;
-  }
-  throw new Error(`canonicalJson: unsupported value of type ${typeof value}`);
-}
-
-// src/domains/prompts/compiler.ts
 var FLEET_ROUTING_GUIDANCE = 'Fleet routing: pin the `agent` id from the Fleet section; agent:"auto" baselines from the task text and is a fallback, not a router.';
 var WORKER_CLAIM_GUIDANCE = 'Never claim a completion, a validation, or a file change that no tool call in this run supports. If you did not run it or write it here, say "not verified" and report what you did do.';
 function lookupFragment(table, id, role) {
@@ -2745,15 +2761,45 @@ function renderProjectBlock(contextFiles) {
 
 ${trimmedFiles}`;
 }
-function renderMemoryBlock(memorySection) {
+function renderMemoryBlock(memorySection, legacyDuplicateHeader = false) {
   const trimmed = memorySection?.trim() ?? "";
-  return trimmed.length === 0 ? "" : `# Memory
+  if (trimmed.length === 0) return "";
+  if (legacyDuplicateHeader) return `# Memory
+
+${trimmed}`;
+  return /^#\s+Memory\s*$/.test(trimmed.split("\n", 1)[0] ?? "") ? trimmed : `# Memory
 
 ${trimmed}`;
 }
 function estimatePromptTokens(text) {
   return ceilChars(text.trim().length);
 }
+var SESSION_PROMPT_SECTION_ORDER = [
+  "identity",
+  "operating-contract",
+  "delegation",
+  "skills",
+  "safety",
+  "tool-contract",
+  "fleet",
+  "retrieval-hints",
+  "project-context",
+  "memory",
+  "runtime"
+];
+var LEGACY_SESSION_PROMPT_SECTION_ORDER = [
+  "identity",
+  "operating-contract",
+  "delegation",
+  "skills",
+  "safety",
+  "runtime",
+  "tool-contract",
+  "fleet",
+  "retrieval-hints",
+  "memory",
+  "project-context"
+];
 function compile(table, inputs) {
   const identity = lookupFragment(table, inputs.identity, "identity");
   const operatingContract = lookupFragment(table, inputs.operatingContract, "operating contract");
@@ -2773,24 +2819,29 @@ function compile(table, inputs) {
   const docsRouting = selfAwareness && sessionHasContext(session) ? table.byId.get("identity.docs-routing") : void 0;
   if (selfAwareness) {
     const packageRoot = resolvePackageRoot();
-    const rendered = selfAwareness.body.replace("{CLIO_DOCS_PATH}", join3(packageRoot, "docs")).replace("{CLIO_SRC_PATH}", join3(packageRoot, "src")).replace("{CLIO_CODEWIKI_PATH}", join3(packageRoot, "dist", "assets", "codewiki.json"));
-    identityBody = [identity.body.trim(), rendered.trim(), ...docsRouting ? [docsRouting.body.trim()] : []].join(
+    const rendered2 = selfAwareness.body.replace("{CLIO_DOCS_PATH}", join3(packageRoot, "docs")).replace("{CLIO_SRC_PATH}", join3(packageRoot, "src")).replace("{CLIO_CODEWIKI_PATH}", join3(packageRoot, "dist", "assets", "codewiki.json"));
+    identityBody = [identity.body.trim(), rendered2.trim(), ...docsRouting ? [docsRouting.body.trim()] : []].join(
       "\n\n"
     );
   }
   const delegation = sessionCanDispatch(session) ? table.byId.get("operating.delegation") : void 0;
   const skills = sessionHasContext(session) ? table.byId.get("operating.skills") : void 0;
-  push("identity", identityBody);
-  push("operating-contract", operatingContract.body);
-  if (delegation) push("delegation", delegation.body);
-  if (skills) push("skills", skills.body);
-  push("safety", renderSafetySection(safety, autonomyLevel));
-  push("runtime", renderRuntimeBlock(session));
-  push("tool-contract", renderToolContractBlock(session));
-  push("fleet", renderFleetBlock(session));
-  push("retrieval-hints", renderRetrievalHintsBlock(session));
-  push("memory", renderMemoryBlock(session.memorySection));
-  push("project-context", renderProjectBlock(session.contextFiles));
+  const legacy = inputs.sectionOrder === "legacy-0.3.8";
+  const rendered = /* @__PURE__ */ new Map([
+    ["identity", identityBody],
+    ["operating-contract", operatingContract.body],
+    ["delegation", delegation?.body ?? ""],
+    ["skills", skills?.body ?? ""],
+    ["safety", renderSafetySection(safety, autonomyLevel)],
+    ["runtime", renderRuntimeBlock(session)],
+    ["tool-contract", renderToolContractBlock(session)],
+    ["fleet", renderFleetBlock(session)],
+    ["retrieval-hints", renderRetrievalHintsBlock(session)],
+    ["memory", renderMemoryBlock(session.memorySection, legacy)],
+    ["project-context", renderProjectBlock(session.contextFiles)]
+  ]);
+  const order = legacy ? LEGACY_SESSION_PROMPT_SECTION_ORDER : SESSION_PROMPT_SECTION_ORDER;
+  for (const id of order) push(id, rendered.get(id) ?? "");
   for (const fragment of inputs.additionalFragments ?? []) {
     push(fragment.id, fragment.body);
   }
@@ -3355,6 +3406,9 @@ init_esm_shims();
 import { randomBytes as randomBytes2 } from "node:crypto";
 var MAX_RESERVATION_RECORDS = 500;
 var DEFAULT_RESERVATION_TTL_MS = 15 * 6e4;
+function endpointCapacityDenial(input) {
+  return `dispatch: admission denied: endpoint '${endpointLabel(input.endpointKey)}' capacity exceeded (${input.used + input.requested}/${input.limit} slots): ${describeEndpointCapacityHolders(input)}; reduce the same-wave worker count, collect in-flight runs, or point workers at a second server`;
+}
 function copyRecord(record) {
   return { ...record, members: record.members.map((member) => ({ ...member })) };
 }
@@ -3362,7 +3416,7 @@ function validRecord(value) {
   if (typeof value !== "object" || value === null) return false;
   const record = value;
   return typeof record.ownerId === "string" && typeof record.ownerPid === "number" && Number.isInteger(record.ownerPid) && record.ownerPid > 0 && (record.topology === "parallel" || record.topology === "detached" || record.topology === "sequential" || record.topology === "pipeline" || record.topology === "review" || record.topology === "compete") && (record.status === "active" || record.status === "released" || record.status === "rolled_back" || record.status === "expired") && typeof record.createdAt === "string" && typeof record.expiresAt === "string" && (record.settledAt === null || typeof record.settledAt === "string") && Array.isArray(record.members) && record.members.every(
-    (member) => typeof member.memberId === "string" && Number.isInteger(member.wave) && typeof member.nodeId === "string" && typeof member.costUpperBoundUsd === "number" && Number.isFinite(member.costUpperBoundUsd) && member.costUpperBoundUsd >= 0 && (member.status === "held" || member.status === "consumed" || member.status === "released") && (member.consumedAt === null || typeof member.consumedAt === "string") && (member.releasedAt === null || typeof member.releasedAt === "string")
+    (member) => typeof member.memberId === "string" && Number.isInteger(member.wave) && typeof member.nodeId === "string" && (member.endpointKey === void 0 || typeof member.endpointKey === "string") && typeof member.costUpperBoundUsd === "number" && Number.isFinite(member.costUpperBoundUsd) && member.costUpperBoundUsd >= 0 && (member.status === "held" || member.status === "consumed" || member.status === "released") && (member.consumedAt === null || typeof member.consumedAt === "string") && (member.releasedAt === null || typeof member.releasedAt === "string")
   );
 }
 function parseReservations(values) {
@@ -3399,9 +3453,13 @@ function reservationAllocation(tasks) {
     )
   );
   const nodeSlots = peakBy(tasks.map((task) => ({ wave: task.wave, key: task.nodeId })));
+  const endpointSlots = peakBy(
+    tasks.flatMap((task) => task.endpointKey === void 0 ? [] : [{ wave: task.wave, key: task.endpointKey }])
+  );
   return {
     globalSlots,
     nodeSlots,
+    endpointSlots,
     budgetUsd: tasks.reduce((sum, task) => sum + task.costUpperBoundUsd, 0)
   };
 }
@@ -3434,6 +3492,26 @@ function allocateReservation(tasks, existing, capacity) {
       return { ok: false, reason: `node '${nodeId}' capacity exceeded (${used + slots}/${node.limit})` };
     }
   }
+  for (const [endpointKey, slots] of Object.entries(requested.endpointSlots)) {
+    const endpoint = capacity.endpoints[endpointKey];
+    if (!endpoint || !Number.isFinite(endpoint.limit)) continue;
+    const heldSlots = held2.reduce((sum, allocation) => sum + (allocation.endpointSlots[endpointKey] ?? 0), 0);
+    const used = endpoint.active + heldSlots;
+    if (used + slots > endpoint.limit) {
+      return {
+        ok: false,
+        reason: endpointCapacityDenial({
+          endpointKey,
+          limit: endpoint.limit,
+          used,
+          requested: slots,
+          leases: endpoint.leases ?? endpoint.active - (endpoint.foregroundStreams ?? 0),
+          reservations: heldSlots,
+          foregroundStreams: endpoint.foregroundStreams ?? 0
+        })
+      };
+    }
+  }
   const existingBudget = activeRecords.reduce((sum, record) => sum + outstandingBudget(record), 0);
   const projected = capacity.budget.currentUsd + existingBudget + requested.budgetUsd;
   if (projected >= capacity.budget.ceilingUsd) {
@@ -3461,7 +3539,9 @@ function createDispatchReservation(input) {
     if (!planned.ok) {
       replaceReservations(state, records);
       writeCapacityStateUnsafe(state);
-      throw new Error(`dispatch: reservation denied: ${planned.reason}`);
+      throw new Error(
+        planned.reason.startsWith("dispatch:") ? planned.reason : `dispatch: reservation denied: ${planned.reason}`
+      );
     }
     const createdAt = new Date(nowMs).toISOString();
     const record = {
@@ -3484,6 +3564,7 @@ function transferDispatchReservationToLease(input) {
   return acquireCapacityLease({
     assignmentId: input.assignmentId,
     nodeId: input.nodeId,
+    ...input.endpointKey !== void 0 ? { endpointKey: input.endpointKey } : {},
     limits: input.limits,
     nowMs,
     ...input.ttlMs !== void 0 ? { ttlMs: input.ttlMs } : {},
@@ -3511,10 +3592,37 @@ function rebindDispatchReservationMember(input) {
     if (member.status === "released") {
       throw new Error(`dispatch: reservation member '${input.memberId}' was already released`);
     }
-    if (member.nodeId === input.nodeId && member.costUpperBoundUsd === input.costUpperBoundUsd) {
+    if (member.nodeId === input.nodeId && member.endpointKey === input.endpointKey && member.costUpperBoundUsd === input.costUpperBoundUsd) {
       return copyRecord(record);
     }
     const others = records.filter((entry) => entry.status === "active" && entry.ownerId !== input.ownerId);
+    if (member.endpointKey !== input.endpointKey && input.endpointKey !== void 0) {
+      const endpointKey = input.endpointKey;
+      const endpoint = input.capacity.endpoints[endpointKey];
+      if (endpoint !== void 0 && Number.isFinite(endpoint.limit)) {
+        const siblingSlots = record.members.filter(
+          (entry) => entry !== member && entry.status !== "released" && entry.endpointKey === endpointKey
+        ).length;
+        const otherHeld = others.reduce(
+          (sum, entry) => sum + (reservationAllocation(outstandingTasks(entry)).endpointSlots[endpointKey] ?? 0),
+          0
+        );
+        const used = endpoint.active + otherHeld + siblingSlots;
+        if (used + 1 > endpoint.limit) {
+          throw new Error(
+            endpointCapacityDenial({
+              endpointKey,
+              limit: endpoint.limit,
+              used,
+              requested: 1,
+              leases: endpoint.leases ?? endpoint.active - (endpoint.foregroundStreams ?? 0),
+              reservations: otherHeld + siblingSlots,
+              foregroundStreams: endpoint.foregroundStreams ?? 0
+            })
+          );
+        }
+      }
+    }
     if (member.nodeId !== input.nodeId) {
       const node = input.capacity.nodes[input.nodeId];
       if (node !== void 0 && Number.isFinite(node.limit)) {
@@ -3542,6 +3650,8 @@ function rebindDispatchReservationMember(input) {
       );
     }
     member.nodeId = input.nodeId;
+    if (input.endpointKey === void 0) delete member.endpointKey;
+    else member.endpointKey = input.endpointKey;
     member.costUpperBoundUsd = Math.max(0, input.costUpperBoundUsd);
     writeStore2(records);
     return copyRecord(record);
@@ -3564,6 +3674,24 @@ function releaseDispatchReservationMember(ownerId, memberId, nowMs = Date.now())
     return copyRecord(record);
   });
 }
+function releaseDispatchReservation(ownerId, nowMs = Date.now()) {
+  return withStateFileLockSync(capacityStateLockPath(), () => {
+    const records = readStore2();
+    const record = records.find((entry) => entry.ownerId === ownerId);
+    if (!record) return null;
+    if (record.status !== "active") return copyRecord(record);
+    const settledAt = new Date(nowMs).toISOString();
+    for (const member of record.members) {
+      if (member.status === "released") continue;
+      member.status = "released";
+      member.releasedAt = settledAt;
+    }
+    record.status = "released";
+    record.settledAt = settledAt;
+    writeStore2(records);
+    return copyRecord(record);
+  });
+}
 function rollbackDispatchReservation(ownerId, nowMs = Date.now()) {
   return withStateFileLockSync(capacityStateLockPath(), () => {
     const records = readStore2();
@@ -3668,6 +3796,15 @@ var PUMP_MIN_MS = 10;
 var PUMP_MAX_MS = 500;
 function describeAdmissionFailure(input) {
   if (input.state === "canceled") return "dispatch: admission canceled before a capacity slot opened";
+  if (input.endpointKey !== void 0) {
+    const endpointLimit = input.limits.endpoints[input.endpointKey];
+    const endpointActive = input.usage.endpoints[input.endpointKey] ?? 0;
+    if (endpointLimit !== void 0 && endpointActive >= endpointLimit) {
+      const holders = input.usage.endpointHolders?.[input.endpointKey];
+      const occupancy = holders === void 0 ? "the supplied capacity snapshot does not attribute the occupied slots" : describeEndpointCapacityHolders(holders);
+      return `dispatch: admission denied: endpoint '${endpointLabel(input.endpointKey)}' capacity reached (${endpointActive}/${endpointLimit} slots): ${occupancy}; collect in-flight runs or point workers at a second server`;
+    }
+  }
   const nodeLimit = input.limits.nodes[input.nodeId];
   const nodeActive = input.usage.nodes[input.nodeId] ?? 0;
   const where = nodeLimit === void 0 ? `${input.usage.global}/${input.limits.global} worker slots in use` : `${nodeActive}/${nodeLimit} worker slots in use on '${input.nodeId}', ${input.usage.global}/${input.limits.global} globally`;
@@ -3709,6 +3846,10 @@ function createCapacityAdmissionController(options) {
           admittedLease = request.value();
           return true;
         } catch (error) {
+          if (error instanceof Error && /endpoint '.*' capacity reached/u.test(error.message)) {
+            queue.fail(request.requestId, error);
+            return false;
+          }
           if (error instanceof Error && /capacity reached/.test(error.message)) return false;
           queue.fail(request.requestId, error instanceof Error ? error : new Error(String(error)));
           return false;
@@ -3759,11 +3900,13 @@ function createCapacityAdmissionController(options) {
             memberId: input.reservation.memberId,
             assignmentId: input.assignmentId,
             nodeId: input.nodeId,
+            ...input.endpointKey !== void 0 ? { endpointKey: input.endpointKey } : {},
             limits: options.limits(),
             nowMs: now()
           }) : acquireCapacityLease({
             assignmentId: input.assignmentId,
             nodeId: input.nodeId,
+            ...input.endpointKey !== void 0 ? { endpointKey: input.endpointKey } : {},
             limits: options.limits(),
             nowMs: now()
           })
@@ -3775,6 +3918,7 @@ function createCapacityAdmissionController(options) {
             describeAdmissionFailure({
               state: outcome.state,
               nodeId: input.nodeId,
+              ...input.endpointKey !== void 0 ? { endpointKey: input.endpointKey } : {},
               waitedMs: now() - queuedAt,
               overdueAtQueueMs: queuedAt - input.deadlineAt,
               queueDepth: queue.size(),
@@ -4344,7 +4488,7 @@ function assessCapabilityMismatch(input) {
 
 // src/domains/dispatch/checkout-writer-lease.ts
 init_esm_shims();
-import { createHash as createHash3 } from "node:crypto";
+import { createHash as createHash2 } from "node:crypto";
 import { existsSync as existsSync5, mkdirSync, readFileSync as readFileSync5, realpathSync, unlinkSync } from "node:fs";
 import { dirname, join as join6 } from "node:path";
 var held = /* @__PURE__ */ new Map();
@@ -4354,7 +4498,7 @@ function canonicalCheckout(checkout) {
 }
 function checkoutWriterLeasePath(checkout) {
   const canonical = canonicalCheckout(checkout);
-  const key = createHash3("sha256").update(canonical, "utf8").digest("hex");
+  const key = createHash2("sha256").update(canonical, "utf8").digest("hex");
   return join6(clioStateDir(), "checkout-writer-leases", `${key}.json`);
 }
 function validRecord3(value) {
@@ -4554,8 +4698,11 @@ function isInfrastructureFailure(failureClass) {
 // src/domains/dispatch/heartbeat.ts
 init_esm_shims();
 var DEFAULT_HEARTBEAT_SPEC = { windowMs: 5e3, graceMs: 1e4 };
-function classifyHeartbeat(heartbeatAt, now, spec) {
-  const age = now - heartbeatAt;
+function heartbeatMonotonicAt(heartbeat) {
+  return heartbeat.monotonic ?? heartbeat.current;
+}
+function classifyHeartbeat(heartbeatMonotonicAt2, monotonicNow, spec) {
+  const age = monotonicNow - heartbeatMonotonicAt2;
   if (age <= spec.windowMs) return "alive";
   if (age <= spec.windowMs + spec.graceMs) return "stale";
   return "dead";
@@ -4564,14 +4711,14 @@ function classifyHeartbeat(heartbeatAt, now, spec) {
 // src/domains/dispatch/host-verification.ts
 init_esm_shims();
 import { execFileSync as execFileSync2 } from "node:child_process";
-import { createHash as createHash5, randomUUID } from "node:crypto";
+import { createHash as createHash4, randomUUID } from "node:crypto";
 import { existsSync as existsSync6, mkdirSync as mkdirSync3, readFileSync as readFileSync6, renameSync, writeFileSync as writeFileSync2 } from "node:fs";
 import { dirname as dirname2, join as join8, resolve as resolve3 } from "node:path";
 
 // src/domains/dispatch/code-step.ts
 init_esm_shims();
 import { execFileSync, spawn as spawn2 } from "node:child_process";
-import { createHash as createHash4 } from "node:crypto";
+import { createHash as createHash3 } from "node:crypto";
 import { mkdirSync as mkdirSync2, writeFileSync } from "node:fs";
 import { isAbsolute, join as join7, resolve as resolve2 } from "node:path";
 var CODE_STEP_CAPTURE_MAX_BYTES = 1048576;
@@ -4591,10 +4738,10 @@ function canonicalCodeReport(report) {
   });
 }
 function codeReportDigest(report) {
-  return createHash4("sha256").update(canonicalCodeReport(report), "utf8").digest("hex");
+  return createHash3("sha256").update(canonicalCodeReport(report), "utf8").digest("hex");
 }
 function sha2562(value) {
-  return createHash4("sha256").update(value, "utf8").digest("hex");
+  return createHash3("sha256").update(value, "utf8").digest("hex");
 }
 function tailUtf8(value, limit, marker) {
   if (value.length <= limit) return { text: value.toString("utf8"), truncated: false };
@@ -4644,7 +4791,7 @@ function workspaceHasChanges(root) {
   return status.trim().length > 0;
 }
 function newCodeRunId() {
-  return `code-${createHash4("sha256").update(`${process.pid}:${Date.now()}:${Math.random()}`).digest("hex").slice(0, 12)}`;
+  return `code-${createHash3("sha256").update(`${process.pid}:${Date.now()}:${Math.random()}`).digest("hex").slice(0, 12)}`;
 }
 async function spawnCommand(input, cwd, argv) {
   const command = input.command;
@@ -4808,7 +4955,7 @@ ${spawned.spawnError}
 var OUTPUT_TAIL_BYTES = 2048;
 var MEMO_VERSION = 1;
 function sha2563(value) {
-  return createHash5("sha256").update(value, "utf8").digest("hex");
+  return createHash4("sha256").update(value, "utf8").digest("hex");
 }
 function outputTail(value) {
   const bytes = Buffer.from(value, "utf8");
@@ -5577,7 +5724,7 @@ function selectApprovedRecoveryCandidates(input) {
 // src/domains/dispatch/reproducibility.ts
 init_esm_shims();
 import { spawnSync } from "node:child_process";
-import { createHash as createHash6 } from "node:crypto";
+import { createHash as createHash5 } from "node:crypto";
 function collectReproducibilityMetadata(cwd, safety) {
   const branch = git(cwd, ["rev-parse", "--abbrev-ref", "HEAD"]);
   const commit = git(cwd, ["rev-parse", "HEAD"]);
@@ -5614,7 +5761,7 @@ function git(cwd, args) {
   return trimmed.length > 0 ? trimmed : null;
 }
 function sha2564(input) {
-  return createHash6("sha256").update(input, "utf8").digest("hex");
+  return createHash5("sha256").update(input, "utf8").digest("hex");
 }
 
 // src/domains/dispatch/route-observer.ts
@@ -5624,7 +5771,7 @@ import { join as join12 } from "node:path";
 
 // src/domains/dispatch/gate-decisions.ts
 init_esm_shims();
-import { createHash as createHash7, randomBytes as randomBytes4 } from "node:crypto";
+import { createHash as createHash6, randomBytes as randomBytes4 } from "node:crypto";
 import { closeSync, existsSync as existsSync8, fsyncSync, mkdirSync as mkdirSync4, openSync, readdirSync as readdirSync2, readFileSync as readFileSync8, rmSync } from "node:fs";
 import { dirname as dirname3, join as join10, resolve as resolve4 } from "node:path";
 function parseReviewGateResult(output) {
@@ -5814,7 +5961,7 @@ function decisionPayload(decision) {
   };
 }
 function decisionDigest(decision) {
-  return createHash7("sha256").update(JSON.stringify(decisionPayload(decision)), "utf8").digest("hex");
+  return createHash6("sha256").update(JSON.stringify(decisionPayload(decision)), "utf8").digest("hex");
 }
 function artifactWithoutIntegrity(artifact) {
   const result = {
@@ -5950,7 +6097,7 @@ function pendingRecordPayload(record) {
   };
 }
 function pendingRecordDigest(record) {
-  return createHash7("sha256").update(JSON.stringify(pendingRecordPayload(record)), "utf8").digest("hex");
+  return createHash6("sha256").update(JSON.stringify(pendingRecordPayload(record)), "utf8").digest("hex");
 }
 function pendingRecordWithoutIntegrity(record) {
   if (record.kind === "output") {
@@ -6441,7 +6588,7 @@ function isPhaseTiming(value) {
 
 // src/domains/dispatch/route-quality.ts
 init_esm_shims();
-import { createHash as createHash8 } from "node:crypto";
+import { createHash as createHash7 } from "node:crypto";
 function compareStrings(left, right) {
   return left < right ? -1 : left > right ? 1 : 0;
 }
@@ -6556,19 +6703,19 @@ function reduceRouteQuality(input) {
   return { label, checks, correlatedGates, sourceDigests: [...sourceDigests].sort(compareStrings) };
 }
 function routeQualityEvalDigest(artifact) {
-  return createHash8("sha256").update(canonicalJson3(artifact), "utf8").digest("hex");
+  return createHash7("sha256").update(canonicalJson2(artifact), "utf8").digest("hex");
 }
-function canonicalJson3(value) {
+function canonicalJson2(value) {
   if (value === null) return "null";
   if (typeof value === "string" || typeof value === "boolean") return JSON.stringify(value);
   if (typeof value === "number") {
     if (!Number.isFinite(value)) throw new Error("route quality eval digest requires finite numbers");
     return JSON.stringify(value);
   }
-  if (Array.isArray(value)) return `[${value.map(canonicalJson3).join(",")}]`;
+  if (Array.isArray(value)) return `[${value.map(canonicalJson2).join(",")}]`;
   if (typeof value === "object") {
     const record = value;
-    return `{${Object.keys(record).sort(compareStrings).map((key) => `${JSON.stringify(key)}:${canonicalJson3(record[key])}`).join(",")}}`;
+    return `{${Object.keys(record).sort(compareStrings).map((key) => `${JSON.stringify(key)}:${canonicalJson2(record[key])}`).join(",")}}`;
   }
   throw new Error(`route quality eval digest cannot represent ${typeof value}`);
 }
@@ -7274,7 +7421,7 @@ function requestOriginFor(req) {
   return req.requestOrigin ?? "agent";
 }
 function sha2565(input) {
-  return createHash9("sha256").update(input, "utf8").digest("hex");
+  return createHash8("sha256").update(input, "utf8").digest("hex");
 }
 function promptHash(systemPrompt) {
   return systemPrompt.length > 0 ? sha2565(systemPrompt) : null;
@@ -8496,19 +8643,20 @@ function createDispatchBundle(context, options) {
     return DEFAULT_RESILIENCE_COOLDOWN_MS;
   };
   const now = options?.now ?? (() => Date.now());
+  const monotonicNow = options?.monotonicNow ?? (() => performance5.now());
   const routeObserver = options?.routeObserver ?? createRouteObserver({});
   let ledger = null;
   let heartbeatTimer = null;
   const active = /* @__PURE__ */ new Map();
   const targetCooldowns = /* @__PURE__ */ new Map();
   const ownedReservations = /* @__PURE__ */ new Set();
-  const runWriteTargets = /* @__PURE__ */ new Map();
-  const recordRunWriteTargets = (runId, paths) => {
-    runWriteTargets.set(runId, paths);
-    while (runWriteTargets.size > RUN_WRITE_TARGET_HISTORY) {
-      const oldest = runWriteTargets.keys().next();
+  const runWriteAttributions = /* @__PURE__ */ new Map();
+  const recordRunWriteAttribution = (runId, attribution) => {
+    runWriteAttributions.set(runId, attribution);
+    while (runWriteAttributions.size > RUN_WRITE_TARGET_HISTORY) {
+      const oldest = runWriteAttributions.keys().next();
       if (oldest.done === true) break;
-      runWriteTargets.delete(oldest.value);
+      runWriteAttributions.delete(oldest.value);
     }
   };
   const capacityAdmission = createCapacityAdmissionController({
@@ -8516,7 +8664,7 @@ function createDispatchBundle(context, options) {
       const settings = getEffectiveSettings();
       const nodes = { local: configuredGlobalCapacity(settings) };
       for (const node of settings?.fleet?.nodes ?? []) nodes[node.id] = node.maxWorkers;
-      return { global: configuredGlobalCapacity(settings), nodes };
+      return { global: configuredGlobalCapacity(settings), nodes, endpoints: configuredEndpointLimits() };
     },
     now,
     reservedPlanPeak: (planId) => reservedPlanPeakSlots(planId, (error) => reportDispatchDiagnostic("read reserved plan peak", error))
@@ -8527,6 +8675,19 @@ function createDispatchBundle(context, options) {
       onError: (error) => reportDispatchDiagnostic("read capacity lease usage", error)
     })
   );
+  function configuredEndpointLimits() {
+    return Object.fromEntries(
+      Object.entries(endpointCapacitiesForStatuses(providers.list())).map(([key, value]) => [key, value.limit])
+    );
+  }
+  function endpointCapacityForTarget(targetId) {
+    const status = providers.list().find((entry) => entry.target.id === targetId);
+    if (status === void 0) return null;
+    const endpoint = endpointCapacityForStatus(status);
+    if (endpoint === null) return null;
+    const configured = endpointCapacitiesForStatuses(providers.list())[endpoint.key];
+    return configured ?? endpoint;
+  }
   function reservationCapacitySnapshot(settings) {
     const preflight = scheduling.preflight();
     const usage = capacityLeaseUsage();
@@ -8535,9 +8696,21 @@ function createDispatchBundle(context, options) {
     };
     for (const node of settings?.fleet?.nodes ?? [])
       nodes[node.id] = { active: usage.nodes[node.id] ?? 0, limit: node.maxWorkers };
+    const endpoints = Object.fromEntries(
+      Object.entries(configuredEndpointLimits()).map(([key, limit]) => [
+        key,
+        {
+          active: usage.endpoints[key] ?? 0,
+          limit,
+          leases: usage.endpointHolders[key]?.leases ?? 0,
+          foregroundStreams: usage.endpointHolders[key]?.foregroundStreams ?? 0
+        }
+      ])
+    );
     return {
       global: { active: usage.global, limit: configuredGlobalCapacity(settings) },
       nodes,
+      endpoints,
       budget: { currentUsd: preflight.currentUsd, ceilingUsd: preflight.ceilingUsd }
     };
   }
@@ -8548,6 +8721,7 @@ function createDispatchBundle(context, options) {
         memberId: task.memberId,
         wave: task.wave,
         nodeId: task.resolution.node.id,
+        ...task.resolution.endpoint !== void 0 ? { endpointKey: task.resolution.endpoint.key } : {},
         costUpperBoundUsd: task.resolution.routeApproval?.totalCostUpperBoundUsd ?? task.resolution.costUpperBoundUsd
       })),
       capacity: reservationCapacitySnapshot(getEffectiveSettings()),
@@ -8589,7 +8763,7 @@ function createDispatchBundle(context, options) {
     const configured = settings?.budget.concurrency;
     return scheduling.maxWorkers?.() ?? (configured === "auto" || configured === void 0 ? 4 : Math.max(1, configured));
   }
-  async function admitAssignmentCapacity(req, nodeId, timing) {
+  async function admitAssignmentCapacity(req, nodeId, timing, endpoint) {
     const queuedAt = now();
     timing.queuedAt = new Date(queuedAt).toISOString();
     const assignmentId = req.lineage?.rootRunId ?? `pending-${queuedAt.toString(36)}-${randomBytes6(6).toString("hex")}`;
@@ -8605,9 +8779,14 @@ function createDispatchBundle(context, options) {
       const admitted = await capacityAdmission.admit({
         assignmentId,
         nodeId,
+        ...endpoint !== null && endpoint !== void 0 ? { endpointKey: endpoint.key } : {},
         deadlineAt,
         ...plan,
-        ...req.reservation !== void 0 && req.lineage === void 0 ? { reservation: req.reservation } : {}
+        // A fleet's first attempt carries lineage and still owns the held
+        // reservation member that admission must transfer into its lease.
+        // Retries carry the same reservation identity after that member was
+        // consumed, so they reacquire/rebind the assignment lease normally.
+        ...req.reservation !== void 0 && (req.lineage === void 0 || req.lineage.attempt === 0) ? { reservation: req.reservation } : {}
       });
       timing.admittedAt = new Date(admitted.admittedAt).toISOString();
       return admitted.lease;
@@ -8619,12 +8798,13 @@ function createDispatchBundle(context, options) {
       throw error;
     }
   }
-  function rebindReservationSlot(req, nodeId, costUsd, settings) {
+  function rebindReservationSlot(req, nodeId, endpoint, costUsd, settings) {
     if (req.reservation === void 0 || req.lineage === void 0) return;
     const capacity = reservationCapacitySnapshot(settings);
     const rebind = {
       ...req.reservation,
       nodeId,
+      ...endpoint !== null ? { endpointKey: endpoint.key } : {},
       costUpperBoundUsd: req.routeApproval?.totalCostUpperBoundUsd ?? costUsd,
       capacity,
       nowMs: now()
@@ -8691,10 +8871,23 @@ function createDispatchBundle(context, options) {
     persistAssignment(settleStoredAssignment(rootRunId, attemptRunId, "failed"), `${rootRunId}:finalize-error`);
     capacityAdmission.releaseAssignment(rootRunId);
   }
+  function retryChainIsLive(run) {
+    if (run.aborted) return false;
+    const reservation = run.req.reservation;
+    if (reservation === void 0) return assignments.get(run.lineage.rootRunId)?.status === "running";
+    try {
+      const record = getDispatchReservation(reservation.ownerId);
+      const member = record?.members.find((entry) => entry.memberId === reservation.memberId);
+      return record?.status === "active" && member !== void 0 && member.status !== "released";
+    } catch (error) {
+      reportDispatchDiagnostic(`read retry liveness for reservation member ${reservation.memberId}`, error);
+      return false;
+    }
+  }
   function maybeScheduleRetry(run, outcome, detail, receipt, failureClass) {
     if (draining) return { scheduled: false };
     const rootRunId = run.lineage.rootRunId;
-    if (assignments.get(rootRunId)?.status !== "running") return { scheduled: false };
+    if (!retryChainIsLive(run)) return { scheduled: false };
     if (!RETRYABLE_OUTCOMES.has(outcome)) {
       retryBackoff.delete(rootRunId);
       return { scheduled: false };
@@ -8803,7 +8996,7 @@ function createDispatchBundle(context, options) {
     });
   }
   async function executeRetry(run, attempt, reason = "retry", decision = decideRetry("internal", run.lineage.attempt, assignmentPolicyFor(run.req).maxRetries)) {
-    if (draining || assignments.get(run.lineage.rootRunId)?.status !== "running") return;
+    if (draining || !retryChainIsLive(run)) return;
     const excludesNode = decision.excludedRouteParts.includes("node");
     const rerouteHops = excludesNode && run.node !== null ? [...run.req.reroutes ?? [], { attempt, fromNode: run.node.id, toNode: "", reason }] : run.req.reroutes;
     const retryReq = {
@@ -8959,8 +9152,8 @@ function createDispatchBundle(context, options) {
       fleetRegistry.recordChannelSuccess(run.node.id);
     }
   }
-  function heartbeatIso(heartbeatMs) {
-    return new Date(heartbeatMs).toISOString();
+  function heartbeatIso(heartbeat) {
+    return new Date(heartbeat.current).toISOString();
   }
   function heartbeatRunStatus(status) {
     return status === "alive" ? "running" : status;
@@ -8979,22 +9172,22 @@ function createDispatchBundle(context, options) {
       event: {
         type: "heartbeat_status",
         status,
-        heartbeatAt: run.heartbeatAt ? heartbeatIso(run.heartbeatAt.current) : null
+        heartbeatAt: run.heartbeatAt ? heartbeatIso(run.heartbeatAt) : null
       }
     });
   }
   function checkActiveHeartbeats() {
     if (!ledger) return;
-    const tickNow = now();
+    const tickMonotonic = monotonicNow();
     for (const run of active.values()) {
       if (run.aborted || run.stallKilled || !run.heartbeatAt) continue;
-      const heartbeatMs = run.heartbeatAt.current;
-      if (!Number.isFinite(heartbeatMs)) continue;
+      const heartbeatMonotonic = heartbeatMonotonicAt(run.heartbeatAt);
+      if (!Number.isFinite(heartbeatMonotonic) || !Number.isFinite(run.heartbeatAt.current)) continue;
       if (run.runtimeKind === "acp-delegation") {
-        ledger.update(run.runId, { heartbeatAt: heartbeatIso(heartbeatMs) });
+        ledger.update(run.runId, { heartbeatAt: heartbeatIso(run.heartbeatAt) });
         const stallMs = run.stallTimeoutMs;
         if (stallMs === null || stallMs <= 0) continue;
-        if (tickNow - heartbeatMs <= stallMs) continue;
+        if (tickMonotonic - heartbeatMonotonic <= stallMs) continue;
         run.stallKilled = true;
         run.heartbeatStatus = "dead";
         emitHeartbeatStatus(run, "dead");
@@ -9004,10 +9197,10 @@ function createDispatchBundle(context, options) {
         }
         continue;
       }
-      const status = classifyHeartbeat(heartbeatMs, tickNow, heartbeatSpec);
+      const status = classifyHeartbeat(heartbeatMonotonic, tickMonotonic, heartbeatSpec);
       const patch = {
         status: heartbeatRunStatus(status),
-        heartbeatAt: heartbeatIso(heartbeatMs)
+        heartbeatAt: heartbeatIso(run.heartbeatAt)
       };
       ledger.update(run.runId, patch);
       if (status === "alive" && run.node !== null && run.node.kind === "ssh") {
@@ -9343,7 +9536,7 @@ function createDispatchBundle(context, options) {
     const wireModelId = lifecycle.agentConfig.id;
     assertTargetNotCoolingDown(req, targetId, runtimeId, wireModelId);
     assertBudgetAdmitsRoute(req, { rates: null, provenance: "unknown" }, settings);
-    const capacityLease = await admitAssignmentCapacity(req, "local", timing);
+    const capacityLease = await admitAssignmentCapacity(req, "local", timing, null);
     const leaseSlot = createLeaseSlotGuard(capacityAdmission, capacityLease.leaseId, req.lineage !== void 0);
     const ledgerRef = (() => {
       try {
@@ -9365,7 +9558,9 @@ function createDispatchBundle(context, options) {
         cwd: lifecycle.cwd,
         safety,
         autonomy: lifecycle.autonomy,
-        clientVersion: readClioVersion()
+        clientVersion: readClioVersion(),
+        now,
+        monotonicNow
       });
     } catch (error) {
       leaseSlot.release();
@@ -9518,7 +9713,7 @@ function createDispatchBundle(context, options) {
       ledgerRef.update(envelope.id, {
         status: "running",
         pid: acp.pid,
-        heartbeatAt: heartbeatIso(acp.heartbeatAt.current),
+        heartbeatAt: heartbeatIso(acp.heartbeatAt),
         lineage,
         identity,
         node: LOCAL_RUN_NODE,
@@ -9878,7 +10073,7 @@ function createDispatchBundle(context, options) {
           cacheReadTokenCount: receiptDraft.cacheReadTokenCount ?? 0,
           cacheWriteTokenCount: receiptDraft.cacheWriteTokenCount ?? 0,
           reasoningTokenCount: receiptDraft.reasoningTokenCount ?? 0,
-          heartbeatAt: heartbeatIso(acp.heartbeatAt.current)
+          heartbeatAt: heartbeatIso(acp.heartbeatAt)
         };
         ledgerRef.update(envelope.id, ledgerPatch);
         const receipt = ledgerRef.recordReceipt(envelope.id, sealRouteDecision(receiptDraft, routeDecision));
@@ -10015,7 +10210,7 @@ function createDispatchBundle(context, options) {
           "dispatch: writeRoots cannot be enforced on an ACP delegation target; the external agent runs its own tool surface. Dispatch to a native or claude-sdk worker."
         );
       }
-      rebindReservationSlot(req, "local", UNKNOWN_PRICING_ADMISSION_ESTIMATE_USD, settings);
+      rebindReservationSlot(req, "local", null, UNKNOWN_PRICING_ADMISSION_ESTIMATE_USD, settings);
       routeObservation = observeShadowRoute(req, void 0, settings);
       return attachRouteObservation({
         ...await dispatchAcpDelegation(req, settings, timing, routeObservation.decision, observer),
@@ -10046,10 +10241,12 @@ function createDispatchBundle(context, options) {
       model: lifecycle.target.wireModelId,
       node: placement?.node?.id ?? "local"
     };
+    const endpoint = endpointCapacityForTarget(lifecycle.target.target.id);
     assertRouteWithinApprovedEnvelope(req, effectiveRoute);
     rebindReservationSlot(
       req,
       effectiveRoute.node,
+      endpoint,
       conservativeRouteAdmissionEstimateUsd(lifecycle.target.effectivePricing, admissionMaxOutputTokens(settings)),
       settings
     );
@@ -10067,7 +10264,7 @@ function createDispatchBundle(context, options) {
       },
       shadow: () => observeShadowRoute(req, placed, settings)
     });
-    const capacityLease = await admitAssignmentCapacity(req, placement?.node.id ?? "local", timing);
+    const capacityLease = await admitAssignmentCapacity(req, placement?.node.id ?? "local", timing, endpoint);
     const leaseSlot = createLeaseSlotGuard(capacityAdmission, capacityLease.leaseId, req.lineage !== void 0);
     const ledgerRef = (() => {
       try {
@@ -10125,6 +10322,8 @@ function createDispatchBundle(context, options) {
     try {
       worker = (placement?.spawn ?? spawnWorker)(spec, {
         cwd: lifecycle.cwd,
+        now,
+        monotonicNow,
         ...agentLedgerId !== null ? { onLedgerPost } : {}
       });
     } catch (error) {
@@ -10174,7 +10373,18 @@ function createDispatchBundle(context, options) {
     const upstreamResponses = [];
     const skillActivations = [];
     const finishContractEntries = [];
-    const runEffects = createRunEffectsRecorder(lifecycle.cwd);
+    let runIdForPermissionAudit = null;
+    const runEffects = createRunEffectsRecorder(lifecycle.cwd, {
+      onWriteRecordDowngraded(downgrade) {
+        const runId = runIdForPermissionAudit;
+        if (runId === null) return;
+        context.bus.emit(BusChannels.DispatchProgress, {
+          runId,
+          agentId: req.agentId,
+          event: { type: "clio_write_record_downgraded", payload: downgrade }
+        });
+      }
+    });
     let finishContractAssistantText = "";
     let finishContractAssistantTurnId = null;
     let failureMessage;
@@ -10182,7 +10392,6 @@ function createDispatchBundle(context, options) {
     const trustedOutcomeCodes = /* @__PURE__ */ new Set();
     let reportedUntrustedOutcome = false;
     const acceptsOutcomeCodeEvents = lifecycle.runtimeKind === "http" || lifecycle.runtimeKind === "sdk" && lifecycle.target.runtime.id === "claude-sdk";
-    let runIdForPermissionAudit = null;
     let workerPolicyPermissionCounter = 0;
     const outputCapture = createWorkerOutputCapture();
     const markObservedPhase = (field) => {
@@ -10395,7 +10604,7 @@ function createDispatchBundle(context, options) {
         ...req.council !== void 0 ? { council: req.council } : {},
         ...req.plan !== void 0 ? { plan: req.plan } : {},
         ...lifecycle.personaOverride ? { personaOverride: lifecycle.personaOverride } : {},
-        ...heartbeatAt ? { heartbeatAt: heartbeatIso(heartbeatAt.current) } : {}
+        ...heartbeatAt ? { heartbeatAt: heartbeatIso(heartbeatAt) } : {}
       });
       observer?.onAdmitted({
         runId: envelope.id,
@@ -10405,6 +10614,7 @@ function createDispatchBundle(context, options) {
       await ledgerRef.persist();
       const fleetIdentity = {
         budget: lifecycle.budgetEnvelope,
+        ...endpoint !== null ? { endpoint: { key: endpoint.key, label: endpoint.label, limit: endpoint.limit } } : {},
         ...placement !== void 0 && placement !== null ? { node: placement.node.id } : {},
         ...req.gate !== void 0 ? { gate: { role: req.gate.role, cycle: req.gate.cycle } } : {},
         ...req.council !== void 0 ? { council: req.council } : {},
@@ -10528,9 +10738,9 @@ function createDispatchBundle(context, options) {
         if (req.fleetGateReceipt === void 0) return null;
         try {
           const content = readFileSync12(resolvePath(lifecycle.cwd, req.fleetGateReceipt.path));
-          return { path: req.fleetGateReceipt.path, pathHash: createHash9("sha256").update(content).digest("hex") };
+          return { path: req.fleetGateReceipt.path, pathHash: createHash8("sha256").update(content).digest("hex") };
         } catch {
-          return { path: req.fleetGateReceipt.path, pathHash: createHash9("sha256").update("").digest("hex") };
+          return { path: req.fleetGateReceipt.path, pathHash: createHash8("sha256").update("").digest("hex") };
         }
       })();
       const ledgerContribution = (() => {
@@ -10887,15 +11097,35 @@ function createDispatchBundle(context, options) {
           dynamicHash: receiptDraft.dynamicHash ?? null,
           ...receiptDraft.cacheReadTokenCount !== void 0 ? { cacheReadTokenCount: receiptDraft.cacheReadTokenCount } : {},
           ...receiptDraft.cacheWriteTokenCount !== void 0 ? { cacheWriteTokenCount: receiptDraft.cacheWriteTokenCount } : {},
-          ...activeRun.heartbeatAt ? { heartbeatAt: heartbeatIso(activeRun.heartbeatAt.current) } : {}
+          ...activeRun.heartbeatAt ? { heartbeatAt: heartbeatIso(activeRun.heartbeatAt) } : {}
         };
         if (receiptDraft.reasoningTokenCount !== void 0) {
           ledgerPatch.reasoningTokenCount = receiptDraft.reasoningTokenCount;
         }
         ledgerRef.update(envelope.id, ledgerPatch);
         const receipt = ledgerRef.recordReceipt(envelope.id, sealRouteDecision(receiptDraft, routeObservation.decision));
-        const writeRecordUsable = receipt.safety?.toolTelemetry?.coverage === "complete" && observedRunEffects.writeRecordComplete;
-        recordRunWriteTargets(envelope.id, writeRecordUsable ? [...observedRunEffects.mutatedPaths] : null);
+        const toolTelemetryComplete = receipt.safety?.toolTelemetry?.coverage === "complete";
+        const downgrades = observedRunEffects.writeRecordDowngrades.map((entry) => ({
+          reason: entry.reason,
+          tool: entry.tool,
+          toolCallId: entry.toolCallId,
+          runId: envelope.id,
+          stepId: null
+        }));
+        if (!toolTelemetryComplete) {
+          downgrades.push({
+            reason: "incomplete_tool_telemetry",
+            tool: null,
+            toolCallId: null,
+            runId: envelope.id,
+            stepId: null
+          });
+        }
+        recordRunWriteAttribution(envelope.id, {
+          recorded: [...observedRunEffects.mutatedPaths],
+          complete: toolTelemetryComplete && observedRunEffects.writeRecordComplete,
+          downgrades
+        });
         await ledgerRef.persist();
         if (worktreeReceipt?.applied === true && req.taskWorktree !== void 0) {
           try {
@@ -11136,12 +11366,14 @@ function createDispatchBundle(context, options) {
       allowedTools: effectiveTools,
       settings
     });
+    const endpoint = endpointCapacityForTarget(target.target.id);
     return {
       agentId: req.agentId,
       specFingerprint: agentSpecFingerprint(agentSpec),
       targetId: target.target.id,
       wireModelId: target.wireModelId,
       runtimeId: target.runtime.id,
+      ...endpoint !== null ? { endpoint: { key: endpoint.key, label: endpoint.label, limit: endpoint.limit } } : {},
       node: previewNode(req).node,
       thinkingLevel: target.thinkingLevel,
       toolSignature: toolSignature(effectiveTools),
@@ -11552,19 +11784,21 @@ function createDispatchBundle(context, options) {
   }
   function snapshot() {
     const tickNow = now();
+    const tickMonotonic = monotonicNow();
     const running = [];
     const totals = { ...finalizedTotals };
     const costAmounts = [...finalizedCosts];
     for (const run of active.values()) {
       let heartbeat = "n/a";
-      if (run.heartbeatAt && Number.isFinite(run.heartbeatAt.current)) {
+      if (run.heartbeatAt && Number.isFinite(heartbeatMonotonicAt(run.heartbeatAt))) {
+        const heartbeatMonotonic = heartbeatMonotonicAt(run.heartbeatAt);
         if (run.runtimeKind === "acp-delegation") {
           const stallMs = run.stallTimeoutMs;
           if (stallMs !== null && stallMs > 0) {
-            heartbeat = tickNow - run.heartbeatAt.current > stallMs ? "dead" : "alive";
+            heartbeat = tickMonotonic - heartbeatMonotonic > stallMs ? "dead" : "alive";
           }
         } else {
-          heartbeat = classifyHeartbeat(run.heartbeatAt.current, tickNow, heartbeatSpec);
+          heartbeat = classifyHeartbeat(heartbeatMonotonic, tickMonotonic, heartbeatSpec);
         }
       }
       const meter = run.meter;
@@ -11678,6 +11912,7 @@ function createDispatchBundle(context, options) {
     routeCandidates,
     reservations: {
       prepare: prepareReservation,
+      release: (ownerId) => releaseDispatchReservation(ownerId, now()),
       rollback: (ownerId) => rollbackDispatchReservation(ownerId, now()),
       rollbackUnconsumed: (ownerId) => rollbackUnconsumedDispatchReservation(ownerId, now()),
       get: getDispatchReservation
@@ -11696,7 +11931,17 @@ function createDispatchBundle(context, options) {
       return ledger.get(runId);
     },
     observedRunWrites(runId) {
-      return runWriteTargets.get(runId) ?? null;
+      const attribution = runWriteAttributions.get(runId);
+      return attribution?.complete === true ? [...attribution.recorded] : null;
+    },
+    observedRunWriteAttribution(runId) {
+      const attribution = runWriteAttributions.get(runId);
+      if (attribution === void 0) return null;
+      return {
+        recorded: [...attribution.recorded],
+        complete: attribution.complete,
+        downgrades: attribution.downgrades?.map((entry) => ({ ...entry })) ?? []
+      };
     },
     assignments: {
       get: (id) => assignments.get(id),
@@ -11823,7 +12068,7 @@ async function writeCodeStepRecord(rootId, record) {
 
 // src/domains/dispatch/delegation-plan.ts
 init_esm_shims();
-import { createHash as createHash10 } from "node:crypto";
+import { createHash as createHash9 } from "node:crypto";
 var DELEGATION_PROPOSAL_BRIEFING_MAX_BYTES = 12e3;
 function buildDelegationProposalBriefing(proposals) {
   const value = proposals.map((proposal) => `PROPOSAL ${proposal.agent}
@@ -11931,7 +12176,7 @@ function validateDelegationPlan(input) {
     }
   }
   const plan = { tasks };
-  return { ok: true, plan, hash: createHash10("sha256").update(JSON.stringify(plan)).digest("hex") };
+  return { ok: true, plan, hash: createHash9("sha256").update(JSON.stringify(plan)).digest("hex") };
 }
 
 // src/domains/dispatch/execution-scheduler.ts
@@ -12359,7 +12604,7 @@ function gateFailureLines(output) {
 
 // src/domains/dispatch/fleet-run.ts
 init_esm_shims();
-import { createHash as createHash11 } from "node:crypto";
+import { createHash as createHash10 } from "node:crypto";
 import { readFileSync as readFileSync13 } from "node:fs";
 import { join as join15 } from "node:path";
 
@@ -12490,10 +12735,29 @@ async function executeFleetRun(input) {
     boundaryFor: (stepId) => livePlan.steps.find((step) => step.id === stepId)?.writes,
     recordedWritesFor: (stepId) => {
       const step = livePlan.steps.find((entry) => entry.id === stepId);
-      if (step === void 0 || step.kind !== "agent") return null;
+      if (step === void 0) return null;
+      if (step.kind !== "agent") {
+        return {
+          recorded: [],
+          complete: false,
+          downgrades: [
+            {
+              reason: "code_step_untracked",
+              tool: null,
+              toolCallId: null,
+              runId: null,
+              stepId
+            }
+          ]
+        };
+      }
       const receipt = receiptsByStep.get(stepId);
       if (receipt === void 0) return null;
-      return dispatch.observedRunWrites?.(receipt.runId) ?? null;
+      if (dispatch.observedRunWriteAttribution !== void 0) {
+        return dispatch.observedRunWriteAttribution(receipt.runId);
+      }
+      const recorded = dispatch.observedRunWrites?.(receipt.runId) ?? null;
+      return recorded === null ? null : { recorded, complete: true, downgrades: [] };
     },
     onVerdict(verdict, path2) {
       if (verdict.detail === null) return;
@@ -12691,7 +12955,7 @@ async function executeFleetRun(input) {
               } catch {
                 gateBytes = "";
               }
-              gatePathHash = createHash11("sha256").update(gateBytes).digest("hex");
+              gatePathHash = createHash10("sha256").update(gateBytes).digest("hex");
               const command = input.commands?.commands.get(step.gate.commandId);
               if (gateBytes.length === 0 || command === void 0) {
                 stepSucceeded = false;
@@ -12864,7 +13128,7 @@ async function executeFleetRun(input) {
       cancel: (assignmentId) => dispatch.abort(assignmentId),
       release: (ownerId) => {
         if (ownerId === NO_WORKER_RESERVATION) return;
-        dispatch.reservations?.rollbackUnconsumed(ownerId);
+        dispatch.reservations?.release(ownerId);
       },
       releaseUnconsumed: (ownerId) => {
         if (ownerId === NO_WORKER_RESERVATION) return;
@@ -12977,6 +13241,36 @@ function attributeEvidenceFailure(facts) {
   return "unknown";
 }
 
+// src/domains/evidence/findings-markdown.ts
+init_esm_shims();
+function renderEvidenceFindingsMarkdown(findings, trustStatus) {
+  const lines = ["# Findings", "", "## Canonical trust", ""];
+  if (trustStatus.runs.length === 0) {
+    lines.push("No linked run trust status.");
+  } else {
+    for (const run of trustStatus.runs) {
+      lines.push(
+        `- run=${run.runId}`,
+        `  tier: ${trustVerdict(run.status)}`,
+        `  summary: ${formatTrustSummary(run.status)}`,
+        `  axes: ${formatTrustAxes(run.status)}`
+      );
+    }
+  }
+  lines.push("", "## Finding records", "");
+  if (findings.length === 0) {
+    lines.push("No findings.");
+  } else {
+    for (const item of findings) {
+      const run = item.runId === null ? "" : ` run=${item.runId}`;
+      lines.push(`- ${item.id} [${item.severity}] ${item.tag}${run}: ${item.message}`);
+    }
+  }
+  lines.push("");
+  return `${lines.join("\n")}
+`;
+}
+
 // src/domains/evidence/provenance.ts
 init_esm_shims();
 var PERSONA_HASH_PREFIX_CHARS = 12;
@@ -13148,7 +13442,6 @@ function buildEvidenceTrustStatusFile(input) {
         evidenceId: input.evidenceId,
         source,
         gateDecisions: input.gateDecisions,
-        auditRows: input.auditRows,
         validationEvidence: input.validationEvidence?.get(source.envelope.id) ?? []
       })
     }))
@@ -13156,7 +13449,6 @@ function buildEvidenceTrustStatusFile(input) {
 }
 function composeEvidenceRunTrustStatus(input) {
   const inspection = inspectRunReceiptTrustStatus(input.source.receipt, input.source.envelope);
-  const receiptRejected = inspection.status.artifactIntegrity.state === "failed";
   let status = inspection.status;
   const grounded = input.validationEvidence.filter((artifact) => isTrustStatusIdentifier(artifact.id));
   if (grounded.length > 0 && (status.validationGrounding.state === "absent" || status.validationGrounding.state === "unknown")) {
@@ -13181,21 +13473,6 @@ function composeEvidenceRunTrustStatus(input) {
       independentReview: adaptGateDecisionReviewStatus(gate, input.source.envelope.id, verification)
     });
   }
-  const finish = latestFinishContractForRun(input.auditRows, input.source.envelope.id);
-  if (finish !== null) {
-    const completion = adaptFinishContractCompletionStatus(finish.assessment, {
-      sourceId: finish.sourceId,
-      artifacts: finish.artifacts
-    });
-    status = composeTrustStatus(status, {
-      completionEvidence: receiptRejected && completion.state === "evidenced" ? {
-        state: "unknown",
-        source: { kind: "finish_contract", id: finish.sourceId },
-        authority: { kind: "clio", id: "finish-contract" },
-        artifacts: finish.artifacts
-      } : completion
-    });
-  }
   return status;
 }
 function latestGateDecisionForRun(decisions, runId) {
@@ -13203,55 +13480,6 @@ function latestGateDecisionForRun(decisions, runId) {
     (left, right) => compareCodepoints(left.createdAt, right.createdAt) || left.cycle - right.cycle || compareCodepoints(left.id, right.id)
   ).at(-1) ?? null;
 }
-function latestFinishContractForRun(rows, runId) {
-  const candidates = rows.filter((row) => row.auditKind === "completion_contract" && row.runId === runId && row.confidence === "exact").flatMap((row) => {
-    const assessment = finishContractAssessmentFromAudit(row.row);
-    if (assessment === null) return [];
-    const correlationId = readOptionalString(row.row.correlationId) ?? `${runId}:completion-contract`;
-    if (!isTrustStatusIdentifier(correlationId)) return [];
-    const turnId = readOptionalString(row.row.turnId);
-    const artifacts = [
-      { kind: "finish_contract_evidence", id: correlationId },
-      ...turnId === null || !isTrustStatusIdentifier(turnId) ? [] : [{ kind: "session_entry", id: turnId }]
-    ];
-    return [{ sourceId: correlationId, assessment, artifacts, timestamp: row.ts ?? "" }];
-  }).sort(
-    (left, right) => compareCodepoints(left.timestamp, right.timestamp) || compareCodepoints(left.sourceId, right.sourceId)
-  );
-  const latest2 = candidates.at(-1);
-  return latest2 === void 0 ? null : { sourceId: latest2.sourceId, assessment: latest2.assessment, artifacts: latest2.artifacts };
-}
-function finishContractAssessmentFromAudit(row) {
-  const reason = readOptionalString(row.reason);
-  const decision = readOptionalString(row.decision);
-  const mutatedPaths = Array.isArray(row.mutatedPaths) ? row.mutatedPaths.filter((entry) => typeof entry === "string") : [];
-  const turnId = readOptionalString(row.turnId);
-  const evidenceKinds = Array.isArray(row.evidenceKinds) ? row.evidenceKinds.filter(isFinishContractEvidenceKind) : [];
-  const evidence = evidenceKinds.map((kind) => ({
-    kind,
-    summary: "recorded by the finish contract",
-    ...turnId === null ? {} : { turnId }
-  }));
-  if (decision === "ok" && reason === "no_mutation") {
-    return { kind: "ok", reason, evidence: [], mutatedPaths };
-  }
-  if (decision === "ok" && reason === "validation_evidence") {
-    return { kind: "ok", reason, evidence, mutatedPaths };
-  }
-  if (decision === "ok" && reason === "explicit_limitation") {
-    return { kind: "ok", reason, evidence: [], mutatedPaths };
-  }
-  if (decision === "engage" && reason === "unvalidated_mutation") {
-    return { kind: "engage", reason, message: "finish contract engaged", evidence: [], mutatedPaths };
-  }
-  return null;
-}
-function isFinishContractEvidenceKind(value) {
-  return value === "validation_command" || value === "protected_artifact" || value === "dispatch_receipt";
-}
-function readOptionalString(value) {
-  return typeof value === "string" && value.trim().length > 0 ? value : null;
-}
 
 // src/domains/evidence/store.ts
 init_esm_shims();
@@ -13564,7 +13792,6 @@ async function buildEvidence(options) {
     evidenceId,
     runSources,
     gateDecisions: gateDecisions.decisions,
-    auditRows: auditLinks.rows,
     validationEvidence
   });
   const findings = buildFindings(runSources, trustStatusRaw, sessionLinks, auditLinks, protectedArtifactsRaw);
@@ -13887,15 +14114,15 @@ function validationToolCallSummary(toolName, args) {
   const parsed = parseMaybeJson(args);
   const argRecord = isRecord11(parsed) ? parsed : null;
   if (toolName === "bash") {
-    const command = readOptionalString2(argRecord?.command);
+    const command = readOptionalString(argRecord?.command);
     if (command === null) return null;
     const detected = detectValidationCommand(command);
     return detected.kind === "validation" ? detected.matched : null;
   }
   if (toolName === "verify") {
-    const check = readOptionalString2(argRecord?.check);
+    const check = readOptionalString(argRecord?.check);
     if (check === "frontend") {
-      const target = readOptionalString2(argRecord?.path) ?? "artifact";
+      const target = readOptionalString(argRecord?.path) ?? "artifact";
       return `verify frontend ${target}`;
     }
     if (check === null) return null;
@@ -13937,7 +14164,7 @@ async function writeEvidenceFiles(directory, overview, runSources, findings, ses
   await writeJson(join17(directory, "trust-status.json"), trustStatus);
   await writeJson(join17(directory, "protected-artifacts.json"), protectedArtifacts);
   await writeJson(join17(directory, "findings.json"), findingsFile(overview.evidenceId, [...findings]));
-  await writeFile(join17(directory, "findings.md"), renderFindings(findings), "utf8");
+  await writeFile(join17(directory, "findings.md"), renderEvidenceFindingsMarkdown(findings, trustStatus), "utf8");
 }
 function rawTraceRows(runSources) {
   const rows = [];
@@ -14082,12 +14309,12 @@ function attributionWindows(ledger, runSources, sessionIds) {
   const linkedSessions = new Set(sessionIds);
   for (const row of ledger.rows) {
     if (!isRecord11(row)) continue;
-    const id = readOptionalString2(row.id);
-    const startedAt = readOptionalString2(row.startedAt);
-    const sessionId = readOptionalString2(row.sessionId);
+    const id = readOptionalString(row.id);
+    const startedAt = readOptionalString(row.startedAt);
+    const sessionId = readOptionalString(row.sessionId);
     if (id === null || startedAt === null || sessionId === null) continue;
     if (windows.has(id) || !linkedSessions.has(sessionId)) continue;
-    windows.set(id, { runId: id, startedAt, endedAt: readOptionalString2(row.endedAt) });
+    windows.set(id, { runId: id, startedAt, endedAt: readOptionalString(row.endedAt) });
   }
   return [...windows.values()].sort((left, right) => compareCodepoints(left.runId, right.runId));
 }
@@ -14202,16 +14429,16 @@ function extractSessionToolCall(entry, linked) {
   const payload = payloadObject(entry.payload);
   const block = firstContentBlock(entry.payload, "toolCall");
   const fn = payloadObject(payload?.function);
-  const id = readOptionalString2(payload?.id) ?? readOptionalString2(payload?.toolCallId) ?? readOptionalString2(payload?.tool_call_id) ?? readOptionalString2(block?.id) ?? entry.turnId;
-  const tool = readOptionalString2(payload?.name) ?? readOptionalString2(payload?.toolName) ?? readOptionalString2(payload?.tool) ?? readOptionalString2(fn?.name) ?? readOptionalString2(block?.name) ?? "tool";
+  const id = readOptionalString(payload?.id) ?? readOptionalString(payload?.toolCallId) ?? readOptionalString(payload?.tool_call_id) ?? readOptionalString(block?.id) ?? entry.turnId;
+  const tool = readOptionalString(payload?.name) ?? readOptionalString(payload?.toolName) ?? readOptionalString(payload?.tool) ?? readOptionalString(fn?.name) ?? readOptionalString(block?.name) ?? "tool";
   const args = payload?.arguments ?? payload?.args ?? payload?.input ?? parseMaybeJson(fn?.arguments) ?? block?.arguments ?? block?.args ?? void 0;
   return { id, tool, args, timestamp: entry.timestamp, link: linked.link, sessionId: linked.sessionId };
 }
 function extractSessionToolResult(entry, linked) {
   const payload = payloadObject(entry.payload);
   const contentText = extractTextFromPayload(entry.payload);
-  const id = readOptionalString2(payload?.toolCallId) ?? readOptionalString2(payload?.tool_call_id) ?? readOptionalString2(payload?.id) ?? null;
-  const tool = readOptionalString2(payload?.toolName) ?? readOptionalString2(payload?.name) ?? readOptionalString2(payload?.tool) ?? "tool";
+  const id = readOptionalString(payload?.toolCallId) ?? readOptionalString(payload?.tool_call_id) ?? readOptionalString(payload?.id) ?? null;
+  const tool = readOptionalString(payload?.toolName) ?? readOptionalString(payload?.name) ?? readOptionalString(payload?.tool) ?? "tool";
   const result = payload?.result ?? payload?.output ?? payload?.out ?? payload?.content ?? (contentText.length > 0 ? contentText : entry.payload);
   return {
     id,
@@ -14238,12 +14465,12 @@ async function linkAuditRows(stateDir, source, runSources, sessionLinks) {
     runSources.map((item) => [item.envelope.id, item.envelope.sessionId ?? item.receipt?.sessionId ?? null])
   );
   for (const audit of auditRows.rows) {
-    const directRunId = readOptionalString2(audit.row.runId);
+    const directRunId = readOptionalString(audit.row.runId);
     if (directRunId !== null && runIds.has(directRunId)) {
       rows.push(
         auditLinkedRow(audit, {
           runId: directRunId,
-          sessionId: readOptionalString2(audit.row.sessionId) ?? runSessionIds.get(directRunId) ?? null,
+          sessionId: readOptionalString(audit.row.sessionId) ?? runSessionIds.get(directRunId) ?? null,
           linkKind: "run-id",
           confidence: "exact",
           reasons: ["audit runId matched run ledger"]
@@ -14251,7 +14478,7 @@ async function linkAuditRows(stateDir, source, runSources, sessionLinks) {
       );
       continue;
     }
-    const directSessionId = readOptionalString2(audit.row.sessionId);
+    const directSessionId = readOptionalString(audit.row.sessionId);
     if (directSessionId !== null && sessionIds.has(directSessionId)) {
       rows.push(
         auditLinkedRow(audit, {
@@ -14286,7 +14513,7 @@ function auditLinkedRow(audit, fields) {
 }
 function bestEffortAuditLink(audit, source, runSources, sessionIds) {
   if (audit.auditKind !== "tool_call") return null;
-  const tool = readOptionalString2(audit.row.tool);
+  const tool = readOptionalString(audit.row.tool);
   if (tool === null || audit.ts === null) return null;
   const candidates = runSources.filter((item) => {
     if (!timestampInRunWindow(audit.ts ?? "", item.envelope)) return false;
@@ -14350,9 +14577,9 @@ function auditToolEvents(rows) {
   const events = [];
   for (const row of rows) {
     if (row.auditKind !== "tool_call") continue;
-    const tool = readOptionalString2(row.row.tool);
+    const tool = readOptionalString(row.row.tool);
     if (tool === null) continue;
-    const decision = readOptionalString2(row.row.decision);
+    const decision = readOptionalString(row.row.decision);
     if (decision === "classified") continue;
     const event = {
       source: "audit-row",
@@ -14369,7 +14596,7 @@ function auditToolEvents(rows) {
     };
     if (row.ts !== null) event.timestamp = row.ts;
     if (decision !== null) event.decision = decision;
-    const actionClass = readOptionalString2(row.row.actionClass);
+    const actionClass = readOptionalString(row.row.actionClass);
     if (actionClass !== null) event.actionClass = actionClass;
     events.push(event);
   }
@@ -14380,8 +14607,8 @@ function compareAuditLinkedRows(a, b) {
   if (byTs !== 0) return byTs;
   const byKind = compareCodepoints(a.auditKind, b.auditKind);
   if (byKind !== 0) return byKind;
-  const aCorrelation = readOptionalString2(a.row.correlationId) ?? "";
-  const bCorrelation = readOptionalString2(b.row.correlationId) ?? "";
+  const aCorrelation = readOptionalString(a.row.correlationId) ?? "";
+  const bCorrelation = readOptionalString(b.row.correlationId) ?? "";
   if (aCorrelation !== bCorrelation) return compareCodepoints(aCorrelation, bCorrelation);
   return compareCodepoints(JSON.stringify(a.row), JSON.stringify(b.row));
 }
@@ -14614,17 +14841,6 @@ function axisFindings(offset, source, status) {
   }
   return out;
 }
-function renderFindings(findings) {
-  if (findings.length === 0) return "# Findings\n\nNo findings.\n";
-  const lines = ["# Findings", ""];
-  for (const item of findings) {
-    const run = item.runId === null ? "" : ` run=${item.runId}`;
-    lines.push(`- ${item.id} [${item.severity}] ${item.tag}${run}: ${item.message}`);
-  }
-  lines.push("");
-  return `${lines.join("\n")}
-`;
-}
 async function readRunLedger(stateDir) {
   const target = join17(stateDir, "runs.json");
   let raw;
@@ -14713,7 +14929,7 @@ function parseRunReceipt(value, source) {
   const integrity = value.integrity;
   if (!isRecord11(integrity)) throw new Error(`${source}.integrity: expected object`);
   const reasoningTokenCount = readOptionalNumber2(value, source, "reasoningTokenCount");
-  const failureMessage = readOptionalString2(value.failureMessage);
+  const failureMessage = readOptionalString(value.failureMessage);
   return {
     ...value,
     runId: readString2(value, source, "runId"),
@@ -14805,7 +15021,7 @@ function readNullableNumber(record, source, field) {
     throw new Error(`${source}.${field}: expected number or null`);
   return value;
 }
-function readOptionalString2(value) {
+function readOptionalString(value) {
   return typeof value === "string" && value.length > 0 ? value : null;
 }
 function parseJson2(raw, source) {
@@ -14947,9 +15163,6 @@ init_esm_shims();
 // src/domains/eval/report.ts
 init_esm_shims();
 
-// src/domains/eval/run-compare.ts
-init_esm_shims();
-
 // src/domains/eval/runner.ts
 init_esm_shims();
 function summarizeEvalResults(records) {
@@ -15018,8 +15231,7 @@ async function buildEvalEvidence(options) {
   const trustStatus = buildEvidenceTrustStatusFile({
     evidenceId,
     runSources: linkedRuns.runSources,
-    gateDecisions: gateDecisions.decisions,
-    auditRows: linkedRuns.auditRows
+    gateDecisions: gateDecisions.decisions
   });
   await writeEvalEvidenceFiles(
     directory,
@@ -15153,7 +15365,7 @@ async function writeEvalEvidenceFiles(directory, artifact, overview, findings, t
   await writeJson2(join18(directory, "protected-artifacts.json"), emptyProtected);
   await writeJson2(join18(directory, "eval-result.json"), redactedArtifact);
   await writeJson2(join18(directory, "findings.json"), findingsFile(overview.evidenceId, [...findings]));
-  await writeFile2(join18(directory, "findings.md"), renderFindings2(findings), "utf8");
+  await writeFile2(join18(directory, "findings.md"), renderEvidenceFindingsMarkdown(findings, trustStatus), "utf8");
 }
 function rawEvalTraceRows(artifact) {
   return artifact.results.map((result) => ({
@@ -15243,16 +15455,6 @@ function renderEvalTranscript(artifact, overview) {
   return `${lines.join("\n")}
 `;
 }
-function renderFindings2(findings) {
-  if (findings.length === 0) return "No findings.\n";
-  const lines = ["# Findings", ""];
-  for (const finding2 of findings) {
-    lines.push(`- ${finding2.id} [${finding2.severity}] ${finding2.tag}: ${finding2.message}`);
-  }
-  lines.push("");
-  return `${lines.join("\n")}
-`;
-}
 async function writeJson2(path2, value) {
   await writeFile2(path2, `${JSON.stringify(value, null, 2)}
 `, "utf8");
@@ -15464,30 +15666,30 @@ init_esm_shims();
 function lower(value) {
   return (value ?? "").toLowerCase();
 }
-function canonicalJson4(value) {
+function canonicalJson3(value) {
   if (value === null) return "null";
   if (typeof value === "string" || typeof value === "boolean") return JSON.stringify(value);
   if (typeof value === "number") {
     if (!Number.isFinite(value)) throw new Error("response schema digest requires finite numbers");
     return JSON.stringify(value);
   }
-  if (Array.isArray(value)) return `[${value.map(canonicalJson4).join(",")}]`;
+  if (Array.isArray(value)) return `[${value.map(canonicalJson3).join(",")}]`;
   if (typeof value === "object") {
     const record = value;
     return `{${Object.keys(record).sort().map((key) => {
       if (record[key] === void 0) throw new Error("response schema digest cannot contain undefined");
-      return `${JSON.stringify(key)}:${canonicalJson4(record[key])}`;
+      return `${JSON.stringify(key)}:${canonicalJson3(record[key])}`;
     }).join(",")}}`;
   }
   throw new Error(`response schema digest cannot represent ${typeof value}`);
 }
 function canonicalResponseSchemaDigest(schema) {
-  return createHash12("sha256").update(canonicalJson4(schema), "utf8").digest("hex");
+  return createHash11("sha256").update(canonicalJson3(schema), "utf8").digest("hex");
 }
 function typedValidationFactsFromToolStats(toolStats) {
   return toolStats.filter((stat) => stat.tool === "verify" && stat.count > 0).map((stat) => ({
     sourceId: "tool:verify",
-    validatorDigest: createHash12("sha256").update(canonicalJson4(stat), "utf8").digest("hex"),
+    validatorDigest: createHash11("sha256").update(canonicalJson3(stat), "utf8").digest("hex"),
     passed: stat.ok === stat.count && stat.errors === 0 && stat.blocked === 0
   }));
 }
@@ -15614,14 +15816,13 @@ export {
   ACP_MAX_RAW_RECORD_BYTES,
   ACP_MAX_CHUNK_BYTES,
   ACP_MAX_TOOL_CALL_ID_BYTES,
-  sha256,
-  canonicalJson2 as canonicalJson,
   compile,
   compileWorker,
   WORKER_OUTPUT_MAX_BYTES,
   durableAssistantTextFromEvent,
   setCapacityDraining,
   capacityDrain,
+  capacityLeaseUsage,
   openAgentLedger,
   renderAgentLedgerBoard,
   closeAgentLedger,
@@ -15659,4 +15860,4 @@ export {
   summarizeEvalResults,
   buildEvalEvidence
 };
-//# sourceMappingURL=chunk-TLQJPP24.js.map
+//# sourceMappingURL=chunk-TEO2TLVN.js.map